Overview

overview

10

Static

static

10

2552-5-0x0...ry.exe

windows7-x64

2552-5-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2552-5-0x0000000000400000-0x000000000040F000-memory.dmp

  • Size

    60KB

  • Sample

    231011-lkhj7aea8w

  • MD5

    08f7874c984d939a24bbb0cbc7ac5e24

  • SHA1

    7750e4aceb27ea4bce10d37bce8c5ee79b5164b1

  • SHA256

    8c8ddf18825d5f750efe32ea5ab58804f88ba9c858d2243b24adbba6459af15f

  • SHA512

    7027039f0f9bde36c83b87ba8b15765d8d3a34102d9d8a62a17dbdaf89f1e3cf77c597cca0ba771d7e36c54663dd5c3f4827428c0adc5e0f9da34e60949f63c3

  • SSDEEP

    1536:B3rPI5jSu1AacZjLVJaf3C7YJj3HG0JC:5rPI5jSu15c5RgfA4D3

Score
10/10
gozi5050isfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

5050

C2

netsecurez.com

whofoxy.com

mimemoa.com

ntcgo.com
Attributes
  • base_path

    /jerry/

  • build

    250260

  • exe_type

    loader

  • extension

    .bob

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      2552-5-0x0000000000400000-0x000000000040F000-memory.dmp

    • Size

      60KB

    • MD5

      08f7874c984d939a24bbb0cbc7ac5e24

    • SHA1

      7750e4aceb27ea4bce10d37bce8c5ee79b5164b1

    • SHA256

      8c8ddf18825d5f750efe32ea5ab58804f88ba9c858d2243b24adbba6459af15f

    • SHA512

      7027039f0f9bde36c83b87ba8b15765d8d3a34102d9d8a62a17dbdaf89f1e3cf77c597cca0ba771d7e36c54663dd5c3f4827428c0adc5e0f9da34e60949f63c3

    • SSDEEP

      1536:B3rPI5jSu1AacZjLVJaf3C7YJj3HG0JC:5rPI5jSu15c5RgfA4D3

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks