Overview

overview

10

Static

static

10

646ab5eb62...45.dll

windows7-x64

1

646ab5eb62...45.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    646ab5eb6224824f04f4b78b80f47e2b7251c8ad9af55d806f7a016403f2fa45.zip
  • Size 28KB
  • Sample230321-ryxh6abb85
  • SHA256 057e29248321830650040ed04dadc60b68f38b2ae5cd2ebfb53525c6a0e1f46b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
isfb5050gozi

Malware Config

Extracted

Family

  • gozi

Botnet

  • 5050

C2

  • https://config.edge.skype.com

  • 91.215.85.201

Attributes
  • base_path

    /jerry/

  • build

    250255

  • exe_type

    loader

  • extension

    .bob

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

File Explorer

  • 646ab5eb6224824f04f4b78b80f47e2b7251c8ad9af55d806f7a016403f2fa45.zip
    .zip 28KB
  • 646ab5eb6224824f04f4b78b80f47e2b7251c8ad9af55d806f7a016403f2fa45.dll
    .dll 52KB

646ab5eb6224824f04f4b78b80f47e2b7251c8ad9af55d806f7a016403f2fa45.zip

  • SHA256 057e29248321830650040ed04dadc60b68f38b2ae5cd2ebfb53525c6a0e1f46b
  • MD5 SHA1 SHA512 SSDEEP
Password
infected