General
-
Target
2032-2-0x0000000000400000-0x0000000000486000-memory.dmp
-
Size
536KB
-
Sample
231012-jbhsgsea5t
-
MD5
3394c5bfdcc8903f779ca758e303b7cd
-
SHA1
2938f7e3a6adfa6245a339b105f321c27bb43ece
-
SHA256
3827f9159a589b744206b2eababd98a8f252a072897d9bb22872106e6cfe90e4
-
SHA512
afe29db272f3b1d556175bc7c40ef88664389310d43372a9c2467508e91eb17e79cef347f5f437976403a0744640a6344c86960e6ab17c32eb20294582f987fb
-
SSDEEP
3072:TrPI5jSu1CgDgfA4D3zE651N6B35eCf3aIVm5SGfipnjcjVcj5of5Ttyl:zu1CgDGJrzE651MJd3zk9qpnjEDf5Tk
Behavioral task
behavioral1
Sample
2032-2-0x0000000000400000-0x0000000000486000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2032-2-0x0000000000400000-0x0000000000486000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
https://avas1ta.com/in/login/
192.121.22.216
http://mimemoa.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
2032-2-0x0000000000400000-0x0000000000486000-memory.dmp
-
Size
536KB
-
MD5
3394c5bfdcc8903f779ca758e303b7cd
-
SHA1
2938f7e3a6adfa6245a339b105f321c27bb43ece
-
SHA256
3827f9159a589b744206b2eababd98a8f252a072897d9bb22872106e6cfe90e4
-
SHA512
afe29db272f3b1d556175bc7c40ef88664389310d43372a9c2467508e91eb17e79cef347f5f437976403a0744640a6344c86960e6ab17c32eb20294582f987fb
-
SSDEEP
3072:TrPI5jSu1CgDgfA4D3zE651N6B35eCf3aIVm5SGfipnjcjVcj5of5Ttyl:zu1CgDGJrzE651MJd3zk9qpnjEDf5Tk
Score3/10 -