General
-
Target
f7e9fd171bf074256c6e584e9df99b24.exe
-
Size
281KB
-
Sample
230309-t9dxasdd76
-
MD5
f7e9fd171bf074256c6e584e9df99b24
-
SHA1
f4f1dd5d6c594abfc620caf22941ed17db4b8e8a
-
SHA256
bbe2063bd1c92ccc4cc3b0320ca484909ba0db5e44e508249b8ec24237404b1d
-
SHA512
d3a97313e46ebf52ca5b7e733f8e5f303e9b109feea98aeb3885688965e4022c1dc6338a9ce45373eba34eeb40d32124e4bf46babf2aece78f2e4dca43f49245
-
SSDEEP
3072:5NebeUUL48L41e1eJEo6Gdm63+iDthdmeAl2tWJNwX3of6ihPYdqDsptmz:feGHLr6fkYKeLQPwMPYdqAb+
Static task
static1
Behavioral task
behavioral1
Sample
f7e9fd171bf074256c6e584e9df99b24.exe
Resource
win7-20230220-en
Malware Config
Extracted
gozi
Extracted
gozi
7712
checklist.skype.com
62.173.141.36
31.41.44.85
193.233.175.98
46.8.210.110
89.116.227.49
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
f7e9fd171bf074256c6e584e9df99b24.exe
-
Size
281KB
-
MD5
f7e9fd171bf074256c6e584e9df99b24
-
SHA1
f4f1dd5d6c594abfc620caf22941ed17db4b8e8a
-
SHA256
bbe2063bd1c92ccc4cc3b0320ca484909ba0db5e44e508249b8ec24237404b1d
-
SHA512
d3a97313e46ebf52ca5b7e733f8e5f303e9b109feea98aeb3885688965e4022c1dc6338a9ce45373eba34eeb40d32124e4bf46babf2aece78f2e4dca43f49245
-
SSDEEP
3072:5NebeUUL48L41e1eJEo6Gdm63+iDthdmeAl2tWJNwX3of6ihPYdqDsptmz:feGHLr6fkYKeLQPwMPYdqAb+
-