General
-
Target
28a57a6a28080eb1374d88cca07b38fb645c558ad30d4d51929d8567dedf5021
-
Size
37KB
-
MD5
3a7417013e38d1953931d08b3b995253
-
SHA1
7c05a25d5bb6ca832a6116724bd985b9c4d6fd43
-
SHA256
28a57a6a28080eb1374d88cca07b38fb645c558ad30d4d51929d8567dedf5021
-
SHA512
edadc44c05c2b06a8c3f3ffc23d23a0946618b75980142fc6110903378a04871f605639d5bb3e372eb40d22add0d22d5ebd2e6ffd2687a3d4745a7c95852a102
-
SSDEEP
768:NQLm41fM01vA4nwFiCRn7IYbo7gMaBMOF6c629pto6z:NL41fMSv8RnFLMaMOF6c6YNz
Score
10/10
Malware Config
Extracted
Family
gozi
Extracted
Family
gozi
Botnet
40000
C2
trackingg-protectioon.cdn1.mozilla.net
siwdmfkshsgw.com
188.127.224.114
weiqeqwns.com
weiqeqwens.com
weiqewqwns.com
iujdhsndjfks.com
ijduwhsbvk.com
Attributes
-
base_path
/uploaded/
-
build
250246
-
exe_type
loader
-
extension
.pct
-
server_id
50
rsa_pubkey.plain
aes.plain
Signatures
-
Gozi family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
28a57a6a28080eb1374d88cca07b38fb645c558ad30d4d51929d8567dedf5021
1640d668d1471f340cbe565fe63522f6
Headers
Imports
Sections