General
-
Target
1568-59-0x0000000000400000-0x00000000004DB000-memory.dmp
-
Size
876KB
-
Sample
230322-k75skahh6v
-
MD5
c77efa4823ff233611f0178462667244
-
SHA1
a52693d2a5a5390ed6489d58bbb6deb28286bc79
-
SHA256
ad82d1a1814733918614a2039fb3bd443448cadcbadcd1d04e1bcb225746ca50
-
SHA512
bed5d184a570fb57b5412d519df7bda9a8682929edd826dd289cb338077d957d7e6a6ebf88d04993b9306b7c1fc418a4f79b2bfcd8d53e86d4cf1d1588395dd3
-
SSDEEP
3072:VfK3pVNoVUE3HnyZRhkNfAhULo04JyVnlT8M43xqwcnUi6JIUjixCxtgwn0F:RK3pVOVUuSD2gZQVlTa3xB0UR
Behavioral task
behavioral1
Sample
1568-59-0x0000000000400000-0x00000000004DB000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1568-59-0x0000000000400000-0x00000000004DB000-memory.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
gozi
Extracted
gozi
7715
checklist.skype.com
62.173.142.50
31.41.44.87
109.248.11.217
212.109.218.151
5.44.45.83
62.173.142.81
193.233.175.113
109.248.11.184
212.109.218.26
185.68.93.7
-
base_path
/drew/
-
build
250255
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
1568-59-0x0000000000400000-0x00000000004DB000-memory.dmp
-
Size
876KB
-
MD5
c77efa4823ff233611f0178462667244
-
SHA1
a52693d2a5a5390ed6489d58bbb6deb28286bc79
-
SHA256
ad82d1a1814733918614a2039fb3bd443448cadcbadcd1d04e1bcb225746ca50
-
SHA512
bed5d184a570fb57b5412d519df7bda9a8682929edd826dd289cb338077d957d7e6a6ebf88d04993b9306b7c1fc418a4f79b2bfcd8d53e86d4cf1d1588395dd3
-
SSDEEP
3072:VfK3pVNoVUE3HnyZRhkNfAhULo04JyVnlT8M43xqwcnUi6JIUjixCxtgwn0F:RK3pVOVUuSD2gZQVlTa3xB0UR
Score3/10 -