Analysis
-
max time kernel
155s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
15-09-2023 19:27
Static task
static1
Behavioral task
behavioral1
Sample
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67.exe
Resource
win7-20230831-en
General
-
Target
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67.exe
-
Size
300.2MB
-
MD5
2868653fa71fced479f0902305aee1e6
-
SHA1
21e637f67b84faa1c9e0441db085fde03479e877
-
SHA256
9df2cd176847f07857b11db10acfd4cb9fe93195dccb4f9c4689bce411ccba67
-
SHA512
5c355a1bd18f0df53c8c941b2dade2747919f2ac0806c95fbfd3a12505df8436ec2ac56299cffe97da6fe3ad03d9ee9e1acde0651113726c4b21902ee3fc1160
-
SSDEEP
3072:Ojpne854ZHT1OmSmMcHWaAMG1JzBsQ0UJ/Pk8In:8ejO4dHWaNZ
Malware Config
Extracted
gozi
Extracted
gozi
2000
trackingg-protectioon.cdn4.mozilla.net
194.76.225.37
trackingg-protectioon.cdn5.mozilla.net
185.212.44.249
109.230.199.185
-
base_path
/fonts/
-
build
250246
-
exe_type
loader
-
extension
.bak
-
server_id
50
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5100-1-0x00000000007F0000-0x00000000008F0000-memory.dmpFilesize
1024KB
-
memory/5100-2-0x0000000000730000-0x000000000073B000-memory.dmpFilesize
44KB
-
memory/5100-3-0x0000000000400000-0x0000000000586000-memory.dmpFilesize
1.5MB
-
memory/5100-4-0x00000000007A0000-0x00000000007AD000-memory.dmpFilesize
52KB
-
memory/5100-7-0x0000000000400000-0x0000000000586000-memory.dmpFilesize
1.5MB
-
memory/5100-8-0x00000000007F0000-0x00000000008F0000-memory.dmpFilesize
1024KB
-
memory/5100-9-0x0000000000730000-0x000000000073B000-memory.dmpFilesize
44KB