General
-
Target
ini.dll
-
Size
197KB
-
Sample
230518-tr3spsbh4x
-
MD5
0a1878191571315e6f53ff8b82d34233
-
SHA1
35313b3ad8f1adf404cc89ef6c778a9dca2cd879
-
SHA256
3b57e3be3e97f299c430572ac5caa4dabdbdf04fe232da2da02300743381d19d
-
SHA512
c1fb158496085e08ea8d80902d783db249aa453acc935ca5904fea1477af462318b6e9b6f75650aee8beda2344746d03b11ff805be402dff9a271800d43dfc56
-
SSDEEP
3072:xaHdKyKCUzG69KPElVBOMa9A4+t9mNo8bbAFE4cGC/P7aXnypI+oF3b8:IHMyAGYuEhsLMYO8PUE4clPQnyaF3b8
Static task
static1
Behavioral task
behavioral1
Sample
ini.dll
Resource
win7-20230220-en
Malware Config
Extracted
gozi
1000
https://bastarka.top
-
host_keep_time
2
-
host_shift_time
1
-
idle_time
1
-
request_time
10
Targets
-
-
Target
ini.dll
-
Size
197KB
-
MD5
0a1878191571315e6f53ff8b82d34233
-
SHA1
35313b3ad8f1adf404cc89ef6c778a9dca2cd879
-
SHA256
3b57e3be3e97f299c430572ac5caa4dabdbdf04fe232da2da02300743381d19d
-
SHA512
c1fb158496085e08ea8d80902d783db249aa453acc935ca5904fea1477af462318b6e9b6f75650aee8beda2344746d03b11ff805be402dff9a271800d43dfc56
-
SSDEEP
3072:xaHdKyKCUzG69KPElVBOMa9A4+t9mNo8bbAFE4cGC/P7aXnypI+oF3b8:IHMyAGYuEhsLMYO8PUE4clPQnyaF3b8
-
Blocklisted process makes network request
-