Overview

overview

10

Static

static

10

2040-55-0x...ry.dll

windows7-x64

3

2040-55-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2040-55-0x00000000001B0000-0x00000000001C3000-memory.dmp

  • Size

    76KB

  • MD5

    2655c80fc73aa500587d35d63e695040

  • SHA1

    dae4ffaeb1c4cecc00ac3acaccde9237070e17a5

  • SHA256

    db69b7f0e7b1fad1f80385fda6e9b2249ca75557b97496ab281a95ea80cab3a4

  • SHA512

    55d4d56020ee4b3f00b1a460e65b3bafe61437f4295255eb769471b8dfc395b13319427c4aeef6498dd5c7c3390dd967788903fbd2f520047cfc8a819a83af35

  • SSDEEP

    768:UGysYcthPbMLsPwFuY2RrQI6jRdB53st+1GJ0V0ezPQdDVJb0OTrd4fJDVLOPEBh:UyFML+2YIf5YdDn/qGU1jDiCo

Score
10/10
ldr41000gozi

Malware Config

Extracted

Family

gozi

Botnet

1000

C2

https://sumarno.top

Attributes
  • host_keep_time

    2

  • host_shift_time

    1

  • idle_time

    1

  • request_time

    10

aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2040-55-0x00000000001B0000-0x00000000001C3000-memory.dmp
    .dll windows x64


    Headers

    Sections