Overview

overview

10

Static

static

10

8cfe732919...3d.exe

windows7-x64

1

8cfe732919...3d.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cfe732919c9dd32250b71d2e605233d.bin

  • Size

    60KB

  • MD5

    8cfe732919c9dd32250b71d2e605233d

  • SHA1

    334e8dabab2548cd82aa726c85fff77c5dabc952

  • SHA256

    84a93a27359377836e07d7ed01b34b141593d770f7a8e3f98847ce99383c7505

  • SHA512

    a3e94c7bef69e3fd42cb5264f4492e6fa441963b604d2b364e584c83463c990cdcad446cb446ea1a47cb3e24b79abedd1d82862e962762918673e1d3d8278e13

  • SSDEEP

    768:ubQ3ZaF3VH+yvAXdHon1a7KLtA/+aPW0d6dfXSt8wpaJMHg4k:ubcZaF3omAtv7K6maPFwdf/wmSk

Score
10/10
isfb555756gozi

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

555756

C2

http://logonn.biinng.com

http://78.153.130.9

http://llogiin.biinng.com

http://45.15.157.239
Attributes
  • base_path

    /zerotohero/

  • build

    250257

  • exe_type

    loader

  • extension

    .asi

  • server_id

    50

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cfe732919c9dd32250b71d2e605233d.bin
    .exe windows x86


    Headers

    Sections