General
-
Target
51d6aa64560113b9a438015a55077f65f2684932894fec023270ec833e0f1b94
-
Size
487KB
-
Sample
230828-wyny8shc3w
-
MD5
9867dc7c4d3426f29fe668b4474275f7
-
SHA1
e6130e7735319ddd5b3d9112a70c5878d9c2f041
-
SHA256
51d6aa64560113b9a438015a55077f65f2684932894fec023270ec833e0f1b94
-
SHA512
352ec7c3c5db4f33785f0478270adb78044f9828256c8f82eaf274a7ad698d872d8d17727ce2a43669715bf76f4815eadb5e85ff2edcfad62e5cbcb7c9f13ed5
-
SSDEEP
6144:zdjkmnzdHALJUif3wgYzhNBXGoAKvxOnbOhUQOahb6Wfdu5g8kR9I:zPzdIeiPwX1NBXGAabO5NgWfScI
Static task
static1
Behavioral task
behavioral1
Sample
51d6aa64560113b9a438015a55077f65f2684932894fec023270ec833e0f1b94.exe
Resource
win7-20230712-en
Malware Config
Extracted
gozi
Extracted
gozi
6000
config.edge.skype.com
onlinetwork.top
linetwork.top
mmmmmm.bar
-
base_path
/drew/
-
build
250246
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
51d6aa64560113b9a438015a55077f65f2684932894fec023270ec833e0f1b94
-
Size
487KB
-
MD5
9867dc7c4d3426f29fe668b4474275f7
-
SHA1
e6130e7735319ddd5b3d9112a70c5878d9c2f041
-
SHA256
51d6aa64560113b9a438015a55077f65f2684932894fec023270ec833e0f1b94
-
SHA512
352ec7c3c5db4f33785f0478270adb78044f9828256c8f82eaf274a7ad698d872d8d17727ce2a43669715bf76f4815eadb5e85ff2edcfad62e5cbcb7c9f13ed5
-
SSDEEP
6144:zdjkmnzdHALJUif3wgYzhNBXGoAKvxOnbOhUQOahb6Wfdu5g8kR9I:zPzdIeiPwX1NBXGAabO5NgWfScI
-
Suspicious use of SetThreadContext
-