General
-
Target
48bed988d504eba9a587d4845f6969d210ae3e9fdcf3fd123c365e8409cbecdb_JC.zip
-
Size
150KB
-
Sample
231011-kgsqbade88
-
MD5
aa2abdb38bf64846c394f460d57b7e34
-
SHA1
f5f29c1d38acc9d85f28953658ebbb723e66fcfc
-
SHA256
48bed988d504eba9a587d4845f6969d210ae3e9fdcf3fd123c365e8409cbecdb
-
SHA512
55514b848a166b0dba26475b27db8ef28be2fc1e5705ef64557d651a3fd7fd5235740a3b214d887a4b422bda43c1081be7c74faa4b5eb60a9b7595e3e772f744
-
SSDEEP
3072:+CyVwqsvkzBbwt5ffhazbNFtH8B8tSDXaKcPMjbz9nEDLkktMJIHmbJpRySnzrjd:+CyaqikdM/gzbNFh8BR3cPM2DLkkGH+6
Static task
static1
Behavioral task
behavioral1
Sample
client.exe
Resource
win7-20230831-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
netsecurez.com
whofoxy.com
mimemoa.com
ntcgo.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
client.exe
-
Size
243KB
-
MD5
5443e928a0871e9bc94ea21c7d9afeeb
-
SHA1
750e185524650c7e3c1899f09dd310a32a573bb0
-
SHA256
a2d1e788f4bb4f2d5e78004374b60c39a7208dcc4e8523eca686719d32bedd4d
-
SHA512
f9cd49bb339850e5988edc0e137c7aeee19a80af13f605dbf7154debfad5c95221d74893e60ad5feeba9016d58ef5f0108bf7ab4a5c2615a34a28b97480ab818
-
SSDEEP
3072:5W1+V6j0oC9M4d76cPMjbz9nEDL2kYAs5cKWChTrDP:52nwo0Mo76cPM2DL2t+KWSTH
-