General
-
Target
4208-3-0x0000000000400000-0x0000000002287000-memory.dmp
-
Size
30.5MB
-
Sample
231015-x6hymaah5t
-
MD5
4f43a3a486dbfb019deeba5ae59f25f6
-
SHA1
004ee44d2a851101dfe371b08fa61047b930170f
-
SHA256
5f4c6eed81d96e440c09192c2b751b72f1ec66e07a03246cb8fd9b01e9834f61
-
SHA512
e0e2931a54250d64bf573ae50021926fe08da689531dc0075b61e371b5aa703da0695edd0cebba08cba784e597140fdf97b054582a9d85b203b43791f884dd6e
-
SSDEEP
3072:drPI5jSu1Fa0v3vdZgXOayiaDoB0Jiyf2mUbC9t1Esa1w/aT:Bu180dGXODfig2mP9Na
Behavioral task
behavioral1
Sample
4208-3-0x0000000000400000-0x0000000002287000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4208-3-0x0000000000400000-0x0000000002287000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
193.203.162.14
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
4208-3-0x0000000000400000-0x0000000002287000-memory.dmp
-
Size
30.5MB
-
MD5
4f43a3a486dbfb019deeba5ae59f25f6
-
SHA1
004ee44d2a851101dfe371b08fa61047b930170f
-
SHA256
5f4c6eed81d96e440c09192c2b751b72f1ec66e07a03246cb8fd9b01e9834f61
-
SHA512
e0e2931a54250d64bf573ae50021926fe08da689531dc0075b61e371b5aa703da0695edd0cebba08cba784e597140fdf97b054582a9d85b203b43791f884dd6e
-
SSDEEP
3072:drPI5jSu1Fa0v3vdZgXOayiaDoB0Jiyf2mUbC9t1Esa1w/aT:Bu180dGXODfig2mP9Na
Score3/10 -