General
-
Target
4740-145-0x0000000002AB0000-0x0000000002ABE000-memory.dmp
-
Size
56KB
-
Sample
230718-vcdqpsdb81
-
MD5
6c18a3380917fe9a573971f9df086130
-
SHA1
30deca4c64a5fd13dd55a71dcaaf697dcbd618e2
-
SHA256
ae1eab4bcda8cb733860fdc6c8d7dc21084b0c5ff2a03a7738cf7c505cf10be7
-
SHA512
548069a0d29592012147930e0ec99ea5921ceecdb7e305a0135594a391118c0923211a4992d465d7a1696d605de69b6ec287b637ca9c6af21455a8bd5aecd674
-
SSDEEP
768:A2fDQuJxEfnJpsy9tvpyuR4LNaX+jN43XepE9sc2MW/vYF68lU/w3DZcHy:hDVPEfnJpdj3V0ecfcWvYEOU/UDG
Behavioral task
behavioral1
Sample
4740-145-0x0000000002AB0000-0x0000000002ABE000-memory.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4740-145-0x0000000002AB0000-0x0000000002ABE000-memory.dll
Resource
win10v2004-20230703-en
Malware Config
Extracted
gozi
Extracted
gozi
20000
http://45.11.182.38
http://79.132.130.230
https://listwhfite.check3.yaho1o.com
https://lisfwhite.ch2eck.yaheoo.com
http://45.155.250.58
https://liset.che3ck.bi1ng.com
http://45.155.249.91
-
base_path
/zerotohero/
-
build
250260
-
exe_type
loader
-
extension
.asi
-
server_id
50
Targets
-
-
Target
4740-145-0x0000000002AB0000-0x0000000002ABE000-memory.dmp
-
Size
56KB
-
MD5
6c18a3380917fe9a573971f9df086130
-
SHA1
30deca4c64a5fd13dd55a71dcaaf697dcbd618e2
-
SHA256
ae1eab4bcda8cb733860fdc6c8d7dc21084b0c5ff2a03a7738cf7c505cf10be7
-
SHA512
548069a0d29592012147930e0ec99ea5921ceecdb7e305a0135594a391118c0923211a4992d465d7a1696d605de69b6ec287b637ca9c6af21455a8bd5aecd674
-
SSDEEP
768:A2fDQuJxEfnJpsy9tvpyuR4LNaX+jN43XepE9sc2MW/vYF68lU/w3DZcHy:hDVPEfnJpdj3V0ecfcWvYEOU/UDG
Score3/10 -