Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    62c8f0eb617194d3ac20cc92d148647f

  • SHA1

    7ddad0a257d870f5bd1c2178bc0cb1814a7dd253

  • SHA256

    c8cd5b4d24e95445db1808a58d15a8189315fc12505708e4e2829c8655f4d632

  • SHA512

    11c35f759083c306e888e5d05e706d8214adebe92b672fa351ea03f326aac2f07aec865f90985a8e80d7bc8348148fadca1e607bb50471334cb0e163578bc7d6

  • SSDEEP

    768:m0gsqVXye2rS/Q4VYXQIVpCHlNBmQWGk2j+A6ewBvu7gpzhK3D1Gc:m9sq8S/QEYXQIVWlvmYp6ewNu7hD1Gc

Score
10/10
isfb7713gozi

Malware Config

Extracted

Family

gozi

Botnet

7713

C2

checklist.skype.com

62.173.142.51

94.103.183.153

193.233.175.111

109.248.11.145

31.41.44.106

191.96.251.201
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections