Overview

overview

10

Static

static

10

1104-58-0x...ry.dll

windows7-x64

1

1104-58-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1104-58-0x00000000001D0000-0x00000000001E3000-memory.dmp

  • Size

    76KB

  • MD5

    58f7f19c55e38cc6d05444b78726b171

  • SHA1

    567905b9ca492bfe5b8cb589dd2eaec5e40ef4d1

  • SHA256

    0f75c961e59370f7d807a4e07b55892956234110b5bdb0985ecc2cf26022684e

  • SHA512

    f74616f8a3974df6ee89a8e7bd1303ef77b4a82bbc9fb41bd2f3f7863ab6581c69fcc96053618bfdafaf3812fefd11ebfc3737558feeeede12b78e17af29bcb8

  • SSDEEP

    1536:ByFML+2YIf5YdDn/qGU1jDiQD//////////////////////////////////////S:BYM5n5eqGU13d

Score
10/10
ldr41000gozi

Malware Config

Extracted

Family

gozi

Botnet

1000

C2

https://vertalis.top

Attributes
  • host_keep_time

    2

  • host_shift_time

    1

  • idle_time

    1

  • request_time

    10

aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1104-58-0x00000000001D0000-0x00000000001E3000-memory.dmp
    .dll windows x64


    Headers

    Sections