Overview

overview

10

Static

static

10

0f0f26d11a...0b.dll

windows7-x64

1

0f0f26d11a...0b.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f0f26d11a9e4502f6343122168f130b.bin

  • Size

    43KB

  • MD5

    0f0f26d11a9e4502f6343122168f130b

  • SHA1

    50188480803bce7d95507c1b02781ece767b40fe

  • SHA256

    34262bdbf791abbeec6ca9403fcf34bf7e7ac3abb8b1ed41fd9d0ad5457eeb80

  • SHA512

    381a633dac46121398a2e56fd50453dab0049a3248b4abb463551aaab188603abcbf00734399b30c49e8f858f87a28e55154449d32e02e02b10fc9e33c6642e1

  • SSDEEP

    768:Ds0zIQOuf1WrHWngROYD3Ps8WyAqa5v+BZ20efofs7gpdsmTx:DsSIQO8184gRO8sxp+BE0efUs7K1Tx

Score
10/10
isfb999665gozi

Malware Config

Extracted

Family

gozi

Botnet

999665

C2

chick.bing.com

http://176.10.111.72

http://94.247.42.106

http://94.247.42.79

http://185.212.44.76

http://45.155.249.200

http://45.155.250.216
Attributes
  • base_path

    /zerotohero/

  • build

    250257

  • exe_type

    loader

  • extension

    .asi

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f0f26d11a9e4502f6343122168f130b.bin
    .dll windows x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections