General
-
Target
1648-4-0x0000000000400000-0x000000000040F000-memory.dmp
-
Size
60KB
-
Sample
231009-w3ealahe34
-
MD5
0635d68d3a5af7e224659a315b69dee9
-
SHA1
ee85e006397e06ca6b90661d535de8d4a530c3c8
-
SHA256
fe13aa8050b2919f8183e9fbfd4e4559bbbb166eef9b49fd47d75b702fddb9bd
-
SHA512
02edec0911adbfe37516478f589cc55a56a20ee85500cd323fd52996bdb0be3b67238151c49b08e7de07b56da96cc7e8e8a3a2efb94d7366e9f678984dfff3f7
-
SSDEEP
768:KA3rPI5jShpW1vbUwlZlyh8Kl7aQixYgxYJmv0NHY7lbI+gFfp:Z3rPI5jSu1ThZliVJaf3C7YJI+ufp
Behavioral task
behavioral1
Sample
1648-4-0x0000000000400000-0x000000000040F000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1648-4-0x0000000000400000-0x000000000040F000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
http://iextrawebty.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
1648-4-0x0000000000400000-0x000000000040F000-memory.dmp
-
Size
60KB
-
MD5
0635d68d3a5af7e224659a315b69dee9
-
SHA1
ee85e006397e06ca6b90661d535de8d4a530c3c8
-
SHA256
fe13aa8050b2919f8183e9fbfd4e4559bbbb166eef9b49fd47d75b702fddb9bd
-
SHA512
02edec0911adbfe37516478f589cc55a56a20ee85500cd323fd52996bdb0be3b67238151c49b08e7de07b56da96cc7e8e8a3a2efb94d7366e9f678984dfff3f7
-
SSDEEP
768:KA3rPI5jShpW1vbUwlZlyh8Kl7aQixYgxYJmv0NHY7lbI+gFfp:Z3rPI5jSu1ThZliVJaf3C7YJI+ufp
Score1/10 -