General
-
Target
3028-1-0x0000000000020000-0x000000000002F000-memory.dmp
-
Size
60KB
-
Sample
230929-1356jaeh6v
-
MD5
40e781a3944f9f30a3fdeab624932707
-
SHA1
29e28399b1fea65fb6a24c220e3ed815994a5479
-
SHA256
8231fe0276384065399cdf87409aab5b44ccefc40fb7b270dfe4679c204e85ab
-
SHA512
3efedd7cbad53e3e9201fdfb741b420017466a89261645191cea4692efbe0e5858b1e94f84b9add3695de39e02a506fe5f8f17d65883cc6e08972ffefa71cb29
-
SSDEEP
768:GWFrPI5hiInveglZcyVZXdP53D9wCYLXaq+4UGJtsa2cdHlZe:bFrPI5hRvnZc2ZNPLwPaq+4U8tsafda
Behavioral task
behavioral1
Sample
3028-1-0x0000000000020000-0x000000000002F000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3028-1-0x0000000000020000-0x000000000002F000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
https://avas1ta.com/in/login/
192.121.22.216
http://mimemoa.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
3028-1-0x0000000000020000-0x000000000002F000-memory.dmp
-
Size
60KB
-
MD5
40e781a3944f9f30a3fdeab624932707
-
SHA1
29e28399b1fea65fb6a24c220e3ed815994a5479
-
SHA256
8231fe0276384065399cdf87409aab5b44ccefc40fb7b270dfe4679c204e85ab
-
SHA512
3efedd7cbad53e3e9201fdfb741b420017466a89261645191cea4692efbe0e5858b1e94f84b9add3695de39e02a506fe5f8f17d65883cc6e08972ffefa71cb29
-
SSDEEP
768:GWFrPI5hiInveglZcyVZXdP53D9wCYLXaq+4UGJtsa2cdHlZe:bFrPI5hRvnZc2ZNPLwPaq+4U8tsafda
Score3/10 -