General
-
Target
2060-135-0x0000000000690000-0x000000000069D000-memory.dmp
-
Size
52KB
-
MD5
c974bb38a6984cf278a2dc302801aebc
-
SHA1
d60ca925147cd0cf33d9faeff8832782f74b7a3e
-
SHA256
68b8fff8a2fe2e9f31d3c64a3836dd028bcad185edd36c784b4ffccbc21cee49
-
SHA512
0144ff9ea15602838512bbeb2fe7fd95086735d26d5a8fdcf6cc7647e6df56877049b30ab2bbaa35be856647fade9418132c726bc2b256bcb277d6e63bdc62e3
-
SSDEEP
1536:IORqYRr/csqr79KBhYYbbtkP/dMeD1Gc:nqMFqr79nYbbS/dMI1G
Score
10/10
Malware Config
Extracted
Family
gozi
Botnet
7713
C2
checklist.skype.com
62.173.142.51
94.103.183.153
193.233.175.111
109.248.11.145
31.41.44.106
191.96.251.201
Attributes
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi family
Files
-
2060-135-0x0000000000690000-0x000000000069D000-memory.dmp
Headers
Sections