Overview

overview

10

Static

static

10

3c9c685c1d...60.dll

windows7-x64

1

3c9c685c1d...60.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c9c685c1dc031960152d9f9ea2ab360

  • Size

    242KB

  • MD5

    3c9c685c1dc031960152d9f9ea2ab360

  • SHA1

    81bd1250506bc99cf63c2634cd0e1cebedb5414a

  • SHA256

    ff26aca4c4abb054dabbbe7995ecdd67160b57f8876e3c4a05778e24479d14f9

  • SHA512

    4c78b7beeb013d2d6dd2c418a921f33eb8569657641d31f893788f9cc3d4ccbcf74404fff7ce1170afa96bde86732e82781ab25642044d9b27ba7ddbecc09cdf

  • SSDEEP

    6144:1mnZO0GDlypHAT/cxkDyPFXkfh+3m33c56Wjak4STS83x:1MZOrEpHAT/cLPF0Im3s56WjaCG8

Score
10/10
isfb3500gozi

Malware Config

Extracted

Family

gozi

Botnet

3500

C2

art.microsoftsofymicrosoftsoft.at

r23cirt55ysvtdvl.onion

fop.langoonik.com

fog.taginoka.at

pop.biopiof.at

l46t3vgvmtx5wxe6.onion

v10.avyanok.com

apr.intoolkom.at

mas.nagonoman.at
Attributes
  • exe_type

    worker

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c9c685c1dc031960152d9f9ea2ab360
    .dll windows:4 windows x64 arch:x64

    8a5d8f502e35131a4443369f6ddb5a6c


    Headers

    Imports

    Sections