General
-
Target
3040-55-0x0000000000180000-0x000000000018E000-memory.dmp
-
Size
56KB
-
Sample
240315-hp28lsad7y
-
MD5
d47b7db6142c3a39f017637338c67be0
-
SHA1
28b88b5b0f59e4e5b9c9bb8710d7059778d14ce7
-
SHA256
5ef56d7143003c33c09dcb6cfabed7ee96031efa91c9a5273d19ce125a430519
-
SHA512
64665bf0c8916ae1958be37ad3be24c81e0e45c733b60eb3d0bb0bff1a63f7e0bc2e35d6ff3ea4bfccccc24e5b7b61c2b6c112bec81d6c3eba83788798830d87
-
SSDEEP
768:A2GElOP0uEfnJRPBfxeNvsyuR4LNaX+jN43XepE9sc2MW/vYF68lU/w3DZcHy:oE4/EfnJRZZeS3V0ecfcWvYEOU/UDG
Behavioral task
behavioral1
Sample
3040-55-0x0000000000180000-0x000000000018E000-memory.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3040-55-0x0000000000180000-0x000000000018E000-memory.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
gozi
Extracted
gozi
20000
http://45.11.182.38
http://79.132.130.230
https://listwhfite.check3.yaho1o.com
https://lisfwhite.ch2eck.yaheoo.com
http://45.155.250.58
https://liset.che3ck.bi1ng.com
http://45.155.249.91
-
base_path
/zerotohero/
-
build
250260
-
exe_type
loader
-
extension
.asi
-
server_id
50
Targets
-
-
Target
3040-55-0x0000000000180000-0x000000000018E000-memory.dmp
-
Size
56KB
-
MD5
d47b7db6142c3a39f017637338c67be0
-
SHA1
28b88b5b0f59e4e5b9c9bb8710d7059778d14ce7
-
SHA256
5ef56d7143003c33c09dcb6cfabed7ee96031efa91c9a5273d19ce125a430519
-
SHA512
64665bf0c8916ae1958be37ad3be24c81e0e45c733b60eb3d0bb0bff1a63f7e0bc2e35d6ff3ea4bfccccc24e5b7b61c2b6c112bec81d6c3eba83788798830d87
-
SSDEEP
768:A2GElOP0uEfnJRPBfxeNvsyuR4LNaX+jN43XepE9sc2MW/vYF68lU/w3DZcHy:oE4/EfnJRZZeS3V0ecfcWvYEOU/UDG
Score3/10 -