General
-
Target
server.exe
-
Size
281KB
-
Sample
230309-kb5spabd39
-
MD5
bd0c85dfbeea3717fcc91c07a72e2bbb
-
SHA1
e31912cc1f8d29f83a438ad8631c59fa7c3ff0b9
-
SHA256
dd0faf063e2118b97c5866b1d7757d0fe0fa3e74bf58ceec853a613f90866444
-
SHA512
f9ad5ab34d9a4deb00cd96f9a8525c2e947d5201b0c3b451d30953cef684380932ce8d0e42ec24e8097038d78a01a434107b1be1e41fa3a9a676657eedeb45bd
-
SSDEEP
3072:SqPgMLqM2mPjK2EYIWwI3uzieWFbgkWNZXqaBFVzK4DNpd+spq+H8:TgMLqY7th3aWFbg/tzVzKOdHUF
Static task
static1
Behavioral task
behavioral1
Sample
server.exe
Resource
win7-20230220-en
Malware Config
Extracted
gozi
Extracted
gozi
7712
checklist.skype.com
62.173.141.36
31.41.44.85
193.233.175.98
46.8.210.110
89.116.227.49
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
server.exe
-
Size
281KB
-
MD5
bd0c85dfbeea3717fcc91c07a72e2bbb
-
SHA1
e31912cc1f8d29f83a438ad8631c59fa7c3ff0b9
-
SHA256
dd0faf063e2118b97c5866b1d7757d0fe0fa3e74bf58ceec853a613f90866444
-
SHA512
f9ad5ab34d9a4deb00cd96f9a8525c2e947d5201b0c3b451d30953cef684380932ce8d0e42ec24e8097038d78a01a434107b1be1e41fa3a9a676657eedeb45bd
-
SSDEEP
3072:SqPgMLqM2mPjK2EYIWwI3uzieWFbgkWNZXqaBFVzK4DNpd+spq+H8:TgMLqY7th3aWFbg/tzVzKOdHUF
-