Overview

overview

10

Static

static

10

1744-59-0x...ry.dll

windows7-x64

1

1744-59-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1744-59-0x0000000000220000-0x000000000022E000-memory.dmp

  • Size

    56KB

  • MD5

    72ba0d34cac5dedd987c8f89ccca1e00

  • SHA1

    4967b252b030e19cc1accb2cdf9d87a57b390f53

  • SHA256

    140b144166d00a52bb7fc5affa59be089088929f755c560817ba445470bd6259

  • SHA512

    652a2dcf2da01083ee96a66ad42ab6cf920cbf5c7d2ecc99fb8250984af57230c1127a91573885736907bc1f0d28cfa631af6f54f11df012f09239df880e7950

  • SSDEEP

    768:A2iWCU0YgGAvZyC5PLHBjderMpEvpZi7/kMPWq9aky77XTm9:sWF0Yhwd5zHzeApsnI/eZDLI

Score
10/10
isfb5050gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

5050

C2

https://config.edge.skype.com

157.254.195.117

91.215.85.151
Attributes
  • base_path

    /jerry/

  • build

    250255

  • exe_type

    loader

  • extension

    .bob

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • 1744-59-0x0000000000220000-0x000000000022E000-memory.dmp
    .dll windows x86


    Headers

    Sections