Overview

overview

10

Static

static

10

832-56-0x0...ry.exe

windows7-x64

1

832-56-0x0...ry.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    832-56-0x0000000000400000-0x0000000002B6C000-memory.dmp

  • Size

    39.4MB

  • Sample

    240303-rx93vscf79

  • MD5

    88cc2322b9c1a6cb7f98f5a326902497

  • SHA1

    98614d08e94b147f92065d5cebada447213eb64e

  • SHA256

    9029de4fc3e7512fa9d8c9cb424fbeaf059d4420c173e5b42190083a55af45e7

  • SHA512

    1005561495236b83ad75fcab308e9d8858c70863c422743f3914cbe1c134cc4859e12294a824cf48632a964f433b8360801c35a83431a81d29fff969b5ce770d

  • SSDEEP

    3072:2fKkT5zT94QeZDChkTEUmXDw1GKa/irjinTI2ApT84bgSHWNObVr:gKkT5t2WepXn3ATI20T84hHj

Score
10/10
gozi7716isfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

7716

C2

checklist.skype.com

193.233.175.115

185.68.93.20

62.173.140.250

46.8.210.133
Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      832-56-0x0000000000400000-0x0000000002B6C000-memory.dmp

    • Size

      39.4MB

    • MD5

      88cc2322b9c1a6cb7f98f5a326902497

    • SHA1

      98614d08e94b147f92065d5cebada447213eb64e

    • SHA256

      9029de4fc3e7512fa9d8c9cb424fbeaf059d4420c173e5b42190083a55af45e7

    • SHA512

      1005561495236b83ad75fcab308e9d8858c70863c422743f3914cbe1c134cc4859e12294a824cf48632a964f433b8360801c35a83431a81d29fff969b5ce770d

    • SSDEEP

      3072:2fKkT5zT94QeZDChkTEUmXDw1GKa/irjinTI2ApT84bgSHWNObVr:gKkT5t2WepXn3ATI20T84hHj

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks