General

  • Target

    2024-08-23_01810f560b84f321ff3915022ddab99a_gozi_hijackloader_magniber_revil

  • Size

    37.3MB

  • MD5

    01810f560b84f321ff3915022ddab99a

  • SHA1

    7f08dbebd49233d6b8c2b98b38573b54ff9a8c88

  • SHA256

    6178d8786aabcf14fc114a3bd53b5b09d41ba0840842d4dfb06ccd565ec01a5f

  • SHA512

    ccc25dc7e8e49030c0bafcdd9a13e5a6b7ac78630b93ecf5a081e19f91fc0a756fd7d984051317e9862dd2a65e6e5882ff7b87dc2f74cd8c58b56aa478f4c2af

  • SSDEEP

    786432:Kubw1wwMAi1CrpB3IckQh7F1DoP+R50Ws1JvD:Kuk1whAiIB4cZ7F18k50WsT

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

Files

  • 2024-08-23_01810f560b84f321ff3915022ddab99a_gozi_hijackloader_magniber_revil
    .exe windows:6 windows x86 arch:x86

    ad09dc233278a4829d98ec145ba40479


    Code Sign

    Headers

    Imports

    Exports

    Sections