General
-
Target
effb293286de517b79fcd1cce7d79f099179ddbebe4f4454553bf4ca9a16cfd5_JC.zip
-
Size
150KB
-
Sample
230929-rafkqsbe2w
-
MD5
c075f0020bbe96acc2d7d2c7c601b846
-
SHA1
0812e82669bed027e1fa07158e15c3956c3364e6
-
SHA256
effb293286de517b79fcd1cce7d79f099179ddbebe4f4454553bf4ca9a16cfd5
-
SHA512
0edf6c0f2f870d15c24d591939cbe0915889d9d4eba5f2a57625178490b70d67b7bbe4721c3a268340c35f589e880bd67686d6ff116f2d1910f29d026c966d31
-
SSDEEP
3072:kCyVwqsvkzBbwt5ffhazbNFtH8B8tSDXaKcPMjbz9nEDLkktMJIHmbJpRySnzrjd:kCyaqikdM/gzbNFh8BR3cPM2DLkkGH+6
Static task
static1
Behavioral task
behavioral1
Sample
client.exe
Resource
win7-20230831-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
netsecurez.com
whofoxy.com
mimemoa.com
ntcgo.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
client.exe
-
Size
243KB
-
MD5
5443e928a0871e9bc94ea21c7d9afeeb
-
SHA1
750e185524650c7e3c1899f09dd310a32a573bb0
-
SHA256
a2d1e788f4bb4f2d5e78004374b60c39a7208dcc4e8523eca686719d32bedd4d
-
SHA512
f9cd49bb339850e5988edc0e137c7aeee19a80af13f605dbf7154debfad5c95221d74893e60ad5feeba9016d58ef5f0108bf7ab4a5c2615a34a28b97480ab818
-
SSDEEP
3072:5W1+V6j0oC9M4d76cPMjbz9nEDL2kYAs5cKWChTrDP:52nwo0Mo76cPM2DL2t+KWSTH
-