Overview

overview

10

Static

static

10

b674b2006f...ac.exe

windows7-x64

1

b674b2006f...ac.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    b674b2006fa33a1fef4825dc3cbb40ac.bin

  • Size

    872KB

  • MD5

    b674b2006fa33a1fef4825dc3cbb40ac

  • SHA1

    0cbbad3d2ed7c9f9f4d77efcb0cbea9b7f594981

  • SHA256

    fc0af00440f1021e17f522e7ef28716aac1a1db6c2299b8f745b51a7668c8466

  • SHA512

    d74c259eca6e1b7016328a6058fe443a3938aea26cacbdc663a54c8a3cec50c9a517ec5f1875daaefcc7eea7f234aaa64973de3619af395ba4e17cea9c8c37b8

  • SSDEEP

    3072:VfKkpVNoVUE3Hn1yLphftOPL0qDWEFYhLlgsr/PJlDiXEgaTtmU9twJJ:RKkpVOVUuVyVkLiEehC2leEgaTtmUT

Score
10/10
isfb7715gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7715

C2

checklist.skype.com

62.173.142.50

31.41.44.87

109.248.11.217

212.109.218.151

5.44.45.83

62.173.142.81

193.233.175.113

109.248.11.184

212.109.218.26

185.68.93.7
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

Files

  • b674b2006fa33a1fef4825dc3cbb40ac.bin
    .exe windows x86


    Headers

    Sections