Overview

overview

10

Static

static

10

140b144166...59.dll

windows7-x64

3

140b144166...59.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    140b144166d00a52bb7fc5affa59be089088929f755c560817ba445470bd6259

  • Size

    56KB

  • Sample

    241120-y533vatbkn

  • MD5

    72ba0d34cac5dedd987c8f89ccca1e00

  • SHA1

    4967b252b030e19cc1accb2cdf9d87a57b390f53

  • SHA256

    140b144166d00a52bb7fc5affa59be089088929f755c560817ba445470bd6259

  • SHA512

    652a2dcf2da01083ee96a66ad42ab6cf920cbf5c7d2ecc99fb8250984af57230c1127a91573885736907bc1f0d28cfa631af6f54f11df012f09239df880e7950

  • SSDEEP

    768:A2iWCU0YgGAvZyC5PLHBjderMpEvpZi7/kMPWq9aky77XTm9:sWF0Yhwd5zHzeApsnI/eZDLI

Score
10/10
gozi5050discoveryisfb

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

5050

C2

https://config.edge.skype.com

157.254.195.117

91.215.85.151
Attributes
  • base_path

    /jerry/

  • build

    250255

  • exe_type

    loader

  • extension

    .bob

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      140b144166d00a52bb7fc5affa59be089088929f755c560817ba445470bd6259

    • Size

      56KB

    • MD5

      72ba0d34cac5dedd987c8f89ccca1e00

    • SHA1

      4967b252b030e19cc1accb2cdf9d87a57b390f53

    • SHA256

      140b144166d00a52bb7fc5affa59be089088929f755c560817ba445470bd6259

    • SHA512

      652a2dcf2da01083ee96a66ad42ab6cf920cbf5c7d2ecc99fb8250984af57230c1127a91573885736907bc1f0d28cfa631af6f54f11df012f09239df880e7950

    • SSDEEP

      768:A2iWCU0YgGAvZyC5PLHBjderMpEvpZi7/kMPWq9aky77XTm9:sWF0Yhwd5zHzeApsnI/eZDLI

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks