General
-
Target
1980-2-0x0000000000400000-0x0000000000486000-memory.dmp
-
Size
536KB
-
Sample
231012-t21q4adg97
-
MD5
18e21247b564298dacdd86b6fc23ef59
-
SHA1
530bca1f2b85d1405f08ae660bd03b456d9706e7
-
SHA256
859ccd51886f721526bbc5cc5c5612a009bfed14d64c420f46579acb0587d56b
-
SHA512
dd5f4eb4163c987815287a302b562baa33a20a67b8ff717248d3d30a95d48fb93faa69c110a7955cfcb376b1e6310b160b2766cbda22310215e83e0dbbd5cc64
-
SSDEEP
3072:TrPI5jSu1RgDgfA4D362oG6Y/JDlvf90PbXP+C7earSQf8aNUJ5Qdud/T0K:zu1RgDGJr62X6YP90PbXP+Cp1od/T
Behavioral task
behavioral1
Sample
1980-2-0x0000000000400000-0x0000000000486000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1980-2-0x0000000000400000-0x0000000000486000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
https://avas1ta.com/in/login/
192.121.22.216
http://mimemoa.com
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
1980-2-0x0000000000400000-0x0000000000486000-memory.dmp
-
Size
536KB
-
MD5
18e21247b564298dacdd86b6fc23ef59
-
SHA1
530bca1f2b85d1405f08ae660bd03b456d9706e7
-
SHA256
859ccd51886f721526bbc5cc5c5612a009bfed14d64c420f46579acb0587d56b
-
SHA512
dd5f4eb4163c987815287a302b562baa33a20a67b8ff717248d3d30a95d48fb93faa69c110a7955cfcb376b1e6310b160b2766cbda22310215e83e0dbbd5cc64
-
SSDEEP
3072:TrPI5jSu1RgDgfA4D362oG6Y/JDlvf90PbXP+C7earSQf8aNUJ5Qdud/T0K:zu1RgDGJr62X6YP90PbXP+Cp1od/T
Score3/10 -