General
-
Target
db2d457f6f55d06141969eb57ae58fb9.bin
-
Size
158KB
-
Sample
231011-jbmfnsbg86
-
MD5
06351370ab2cae3fb1a2ff52056e3465
-
SHA1
47f9c20242e1dbf700899d3e4134604e43ac5e57
-
SHA256
d01464f922aec24c4164aecd9e22191462231f68fc1af5fc0528b307f7a28b13
-
SHA512
ccc163037c11b23b32b8ae7ac74cb5de8395dad736f7dd529f511e917fe1c570911890c0e44b59f0b37e9efdcb9ccd4e4eebc8094229eff97310dc7e7caec352
-
SSDEEP
3072:zWqpxtcz9avG8l7+Pd1DjPZGnxeCkaShtr26TcbN8KI4WFrRFfmcFJkI:zpxSz8visx9U6O4WFrRFfmSP
Static task
static1
Behavioral task
behavioral1
Sample
client.exe
Resource
win7-20230831-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
netsecurez.com
whofoxy.com
mimemoa.com
ntcgo.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
client.exe
-
Size
267KB
-
MD5
5a84945991cf24c957cf67fd414c9f9a
-
SHA1
06206df47fd0805d616f31b5e56daa6378409e72
-
SHA256
5633a46c25aced4b07728fd437b92c5e9102eabaa134ac584e2aae2e0adce587
-
SHA512
307f16d760c0adbeb829705e6db167c460c7d048da56049a8240c6cf6de69c2e6f41fcb9cca7c2e2ee03b8b5cbe8132f346fc3626c39e7f4de6c6d0cbfce2ed2
-
SSDEEP
6144:ZWO3FffE31kwsQODpAkVyakH7bWMxNTf:EOFf8lDsQsVyaOP5
-