Overview

overview

10

Static

static

10

gozi.dll

windows7-x64

1

gozi.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    gozi.payload-disk

  • Size

    43KB

  • MD5

    7be96204ad39ac7430454d79d59bee54

  • SHA1

    3295130c563c8ba2964e056c06822c5b6b69b5c8

  • SHA256

    ef55057af7fb05f07ba94cf79ffd9e12f3a77eb3f08efb24bb8aa178e912e36f

  • SHA512

    e7cf40fef4aa7f9d325ee17afcfd58f767c6d1544e0ebd4e4a2257a4b735e3fa2b73cf348a170c1d5f4e9eb800c7872218c49e2ae34da4c348b23ae66287b266

  • SSDEEP

    768:C0gsqVXye2rS/Q4VYXQIVpCHlNBmQWGk2j+A6ewBvu7gpzhK3D1Gc0B:C9sq8S/QEYXQIVWlvmYp6ewNu7hD1GcM

Score
10/10
isfb7715gozi

Malware Config

Extracted

Family

gozi

Botnet

7715

C2

checklist.skype.com

62.173.142.50

31.41.44.87

109.248.11.217

212.109.218.151

5.44.45.83

62.173.142.81

193.233.175.113

109.248.11.184

212.109.218.26

185.68.93.7
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • gozi.payload-disk
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections