General
-
Target
nope.dll
-
Size
561KB
-
Sample
230524-p3gmdsce48
-
MD5
75e89365c4cb3b03e2aa4ca4e196274a
-
SHA1
5b561d25518c7b027ae8b2afa2ff29791130071c
-
SHA256
29af49de0b319c38f3d83f5c4eaca274b84e5a9084e3b486317bc48cfec2bd7c
-
SHA512
2842b2b715c55a6c937b5795d094c26db86a43e1c4c458938c3dcc141e7110dd4d601e45c68ec0edbb8c259562458b3f9112c3eb5ecc94073986e662850d19e4
-
SSDEEP
12288:frLPENPga63FHCkgGwWPSHlRzP8waiWgCCiYmGEnxVT:frLs1V63FpgGwWKfYwairCCitvxp
Static task
static1
Behavioral task
behavioral1
Sample
nope.dll
Resource
win7-20230220-en
Malware Config
Extracted
gozi
Extracted
gozi
20000
trackingg-protectioon.cdn4.mozilla.net
http://79.132.129.207
http://94.247.42.106
http://94.247.42.79
http://185.212.44.76
http://45.155.249.200
http://45.155.250.216
-
base_path
/zerotohero/
-
build
250257
-
exe_type
loader
-
extension
.asi
-
server_id
50
Targets
-
-
Target
nope.dll
-
Size
561KB
-
MD5
75e89365c4cb3b03e2aa4ca4e196274a
-
SHA1
5b561d25518c7b027ae8b2afa2ff29791130071c
-
SHA256
29af49de0b319c38f3d83f5c4eaca274b84e5a9084e3b486317bc48cfec2bd7c
-
SHA512
2842b2b715c55a6c937b5795d094c26db86a43e1c4c458938c3dcc141e7110dd4d601e45c68ec0edbb8c259562458b3f9112c3eb5ecc94073986e662850d19e4
-
SSDEEP
12288:frLPENPga63FHCkgGwWPSHlRzP8waiWgCCiYmGEnxVT:frLs1V63FpgGwWKfYwairCCitvxp
-