Analysis
-
max time kernel
143s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
15-09-2023 19:27
Static task
static1
Behavioral task
behavioral1
Sample
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67.exe
Resource
win7-20230831-en
General
-
Target
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67.exe
-
Size
300.2MB
-
MD5
2868653fa71fced479f0902305aee1e6
-
SHA1
21e637f67b84faa1c9e0441db085fde03479e877
-
SHA256
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67
-
SHA512
5c355a1bd18f0df53c8c941b2dade2747919f2ac0806c95fbfd3a12505df8436ec2ac56299cffe97da6fe3ad03d9ee9e1acde0651113726c4b21902ee3fc1160
-
SSDEEP
3072:Ojpne854ZHT1OmSmMcHWaAMG1JzBsQ0UJ/Pk8In:8ejO4dHWaNZ
Malware Config
Extracted
gozi
Extracted
gozi
2000
trackingg-protectioon.cdn4.mozilla.net
194.76.225.37
trackingg-protectioon.cdn5.mozilla.net
185.212.44.249
109.230.199.185
-
base_path
/fonts/
-
build
250246
-
exe_type
loader
-
extension
.bak
-
server_id
50
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2296-1-0x00000000009D0000-0x0000000000AD0000-memory.dmpFilesize
1024KB
-
memory/2296-2-0x0000000000400000-0x0000000000586000-memory.dmpFilesize
1.5MB
-
memory/2296-3-0x0000000000220000-0x000000000022B000-memory.dmpFilesize
44KB
-
memory/2296-4-0x00000000009D0000-0x0000000000AD0000-memory.dmpFilesize
1024KB
-
memory/2296-5-0x0000000000400000-0x0000000000586000-memory.dmpFilesize
1.5MB
-
memory/2296-7-0x00000000003D0000-0x00000000003DD000-memory.dmpFilesize
52KB
-
memory/2296-10-0x0000000000400000-0x0000000000586000-memory.dmpFilesize
1.5MB