Overview

overview

10

Static

static

10

501a0923da...7c.exe

windows7-x64

10

501a0923da...7c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    501a0923da5dec0de167c269b14cc57d2d150a7a979aff258ec404b64174ea7c

  • Size

    36KB

  • MD5

    2889607a8e17353de6b94c38270d43ee

  • SHA1

    c63f5f0eb8accdbe0cefc3f15bb266811a8fdf8e

  • SHA256

    501a0923da5dec0de167c269b14cc57d2d150a7a979aff258ec404b64174ea7c

  • SHA512

    39ac1f377ce743e4c50d6c73c24da7a080e7c03a75e281280801b00c3b616e06364c5e640df37ad917c98b4eba1361924ae179108f816c86cb873f56709b72e9

  • SSDEEP

    768:xKbMPv5JL7yTYDTj6onhJims27ypsVnkHjW5z8doVahabZQ:x4MHLL7lTjbnhJi52725RK0abi

Score
10/10
isfb7gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7

C2

reggy505.ru

iujdhsndjfks.ru

94.198.54.97

gameindikdowd.ru

jhgfdlkjhaoiu.su

reggy506.ru
Attributes
  • base_path

    /uploaded/

  • build

    250249

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 501a0923da5dec0de167c269b14cc57d2d150a7a979aff258ec404b64174ea7c
    .exe windows x86

    1640d668d1471f340cbe565fe63522f6


    Headers

    Imports

    Sections