General
-
Target
12496708934.zip
-
Size
222KB
-
Sample
231023-t1wqraad5y
-
MD5
767aad55dc448723928382ae833502ed
-
SHA1
1087b83002c8b7ba0312defdf7ebfe9c67b5a2d2
-
SHA256
6f753576a7bc25903b7f6d60223d6cd21b76b477738f8c8c8f46954455c3ce75
-
SHA512
4b029f1a4017d7011481689a748a745ea59328a2a5f4f37dc0a7063776d09513101a56270aabbbec68dff34abc8a28c71874af090ce3955c074bbf3c1eab266e
-
SSDEEP
6144:3RRwGcP2QbNg+OZ+jqxa87ywdV5DcRsj5FT+xIBwIruOw:3R2b3O+jrwrJ0sj5BDut
Static task
static1
Behavioral task
behavioral1
Sample
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66.exe
Resource
win7-20231020-en
Malware Config
Extracted
gozi
Extracted
gozi
6000
config.edge.skype.com
onlinetwork.top
linetwork.top
mmmmmm.bar
-
base_path
/drew/
-
build
250246
-
exe_type
loader
-
extension
.jlk
-
server_id
50
Targets
-
-
Target
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66
-
Size
469KB
-
MD5
53253db5ff9d00f85d2dfd6f3a25fb62
-
SHA1
71a72beaae92a83a5912a4cb2af301259e15473b
-
SHA256
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66
-
SHA512
f84be54a85f6224bb2d89cda98ca67ef59622d24a40162b36518ac71352184616c531551c7b4a73479eafbbdeeae7bce590647e3c381badbad3a008ba6a5214a
-
SSDEEP
6144:qdjkmnzdHALJUif3wgYzhNBXGoAKvxOnbOhUQOahb6Wfdu5g8kRC:qPzdIeiPwX1NBXGAabO5NgWfST
-
Suspicious use of SetThreadContext
-