General

  • Target

    final.bin

  • Size

    43KB

  • MD5

    2beb711bcfd441ca2d92da0313823a41

  • SHA1

    ebc1777b9ef7242892e8479f3330ed561c370127

  • SHA256

    876860a923754e2d2f6b1514d98f4914271e8cf60d3f95cf1f983e91baffa32b

  • SHA512

    608010f0c256c87cb75a78f26c2f64815cfc13691f62c41df6858feacd393900663c9dddfa73af7ff22024d30af7f440c0f30a3822f958ae0c80a9a09744f52f

  • SSDEEP

    768:10gsqVXye2rS/Q4VYXQIVpCHlNBmQWGk2j+A6ewBvu7gpzhK3D1Gc:19sq8S/QEYXQIVWlvmYp6ewNu7hD1Gc

Score
10/10

Malware Config

Extracted

Family

gozi

Botnet

7709

C2

checklist.skype.com

62.173.141.252

31.41.44.33

109.248.11.112

Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • final.bin
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections