Overview

overview

10

Static

static

10

c62763c8dd...a8.dll

windows7-x64

1

c62763c8dd...a8.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c62763c8dd7c8bd3d94240bdc1f8eba8

  • Size

    242KB

  • MD5

    c62763c8dd7c8bd3d94240bdc1f8eba8

  • SHA1

    3cddecdc77d50b35cca9fc878d6656d8dec73174

  • SHA256

    21db22341a086b1942852263de93d3c761fabf6233b9ea00b45983ac2c2b1774

  • SHA512

    1efb00e16d908038bcad6f36ce60147dc07f46cb29e2e0fdb485e6aebc68b29e61ce5190cbf1adf8f8677633c5a69c8bd70d30421b74e638ce9317c4351d601b

  • SSDEEP

    6144:tmnZO0GDlypHAT/cxkDyPFXkfh+3m33c5TWjak4SQS83x:tMZOrEpHAT/cLPF0Im3s5TWjaCB8

Score
10/10
isfb2500gozi

Malware Config

Extracted

Family

gozi

Botnet

2500

C2

art.microsoftsofymicrosoftsoft.at

apr.intoolkom.at

r23cirt55ysvtdvl.onion

gta5.fifatalk.at

pop.biopiof.at

l46t3vgvmtx5wxe6.onion

v10.avyanok.com

free.monotreener.com

sam.fafona.at
Attributes
  • exe_type

    worker

  • server_id

    580

rsa_pubkey.plain
aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c62763c8dd7c8bd3d94240bdc1f8eba8
    .dll windows:4 windows x64 arch:x64

    8a5d8f502e35131a4443369f6ddb5a6c


    Headers

    Imports

    Sections