General
-
Target
1980-56-0x0000000000400000-0x00000000004AF000-memory.dmp
-
Size
700KB
-
Sample
240312-psy4pagh4x
-
MD5
9d51cf9f64902587ddf29b6590408b3b
-
SHA1
f4080c4045b340d7061306dd68673373ced83a3f
-
SHA256
828848cc96bbceeaadba8d6c3a0826fd28b2ed478448663e2dbf899361bb023c
-
SHA512
63090d4526739ae81557d1e9b6f3c76049774c2308134452baa4c8281753366f0d35ad0c94710e2a4bebd7de712267618739798d4df44ac9c3ff38a506549b83
-
SSDEEP
3072:HA1g0VjtYZ10n02zTGmMAe5BkKoieLe0sNoHFh:g1g0VWr0n0+/pKoJrIoH
Behavioral task
behavioral1
Sample
1980-56-0x0000000000400000-0x00000000004AF000-memory.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1980-56-0x0000000000400000-0x00000000004AF000-memory.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
gozi
Extracted
gozi
10000
https://avast.com/in/login/
http://94.247.42.61
https://avast.com/ibgn/login/
http://185.158.251.39
-
base_path
/front/
-
build
250259
-
exe_type
loader
-
extension
.bak
-
server_id
50
Targets
-
-
Target
1980-56-0x0000000000400000-0x00000000004AF000-memory.dmp
-
Size
700KB
-
MD5
9d51cf9f64902587ddf29b6590408b3b
-
SHA1
f4080c4045b340d7061306dd68673373ced83a3f
-
SHA256
828848cc96bbceeaadba8d6c3a0826fd28b2ed478448663e2dbf899361bb023c
-
SHA512
63090d4526739ae81557d1e9b6f3c76049774c2308134452baa4c8281753366f0d35ad0c94710e2a4bebd7de712267618739798d4df44ac9c3ff38a506549b83
-
SSDEEP
3072:HA1g0VjtYZ10n02zTGmMAe5BkKoieLe0sNoHFh:g1g0VWr0n0+/pKoJrIoH
Score3/10 -