General
-
Target
2024-3-0x0000000000400000-0x0000000002287000-memory.dmp
-
Size
30.5MB
-
Sample
231016-cfajcadc53
-
MD5
14d06a844ae536e9ba6b8653349ba6c5
-
SHA1
7931c57b345fddc1b295924eeb7269b11b1a5225
-
SHA256
a9366c1d8aa913f90906c31d2573cc6458e91912a9617bce0df90df8b7c2f813
-
SHA512
bb5c65479d756a9a6e2afc6ea551918f4079056536c8f6eae64d13ffb1d8ee302eb98e8a51c2466c1965cd52eb24d78424b08457ee1698db1c8cea062fc6af6e
-
SSDEEP
6144:Ou1RqPr7UdTRN0W24TYYV27nbLfgBWHvM:XOPruRmqYk28BWH
Behavioral task
behavioral1
Sample
2024-3-0x0000000000400000-0x0000000002287000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2024-3-0x0000000000400000-0x0000000002287000-memory.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
gozi
Extracted
gozi
5050
45.93.139.24
-
base_path
/jerry/
-
build
250260
-
exe_type
loader
-
extension
.bob
-
server_id
50
Targets
-
-
Target
2024-3-0x0000000000400000-0x0000000002287000-memory.dmp
-
Size
30.5MB
-
MD5
14d06a844ae536e9ba6b8653349ba6c5
-
SHA1
7931c57b345fddc1b295924eeb7269b11b1a5225
-
SHA256
a9366c1d8aa913f90906c31d2573cc6458e91912a9617bce0df90df8b7c2f813
-
SHA512
bb5c65479d756a9a6e2afc6ea551918f4079056536c8f6eae64d13ffb1d8ee302eb98e8a51c2466c1965cd52eb24d78424b08457ee1698db1c8cea062fc6af6e
-
SSDEEP
6144:Ou1RqPr7UdTRN0W24TYYV27nbLfgBWHvM:XOPruRmqYk28BWH
Score3/10 -