Overview

overview

10

Static

static

10

ba4d979d9f...6N.dll

windows7-x64

1

ba4d979d9f...6N.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba4d979d9f66cfd9cfa188b565b25d17cd2608ee19f114c75815a2cb017e8116N.exe

  • Size

    57KB

  • MD5

    4c13d04e36512423c85cacc4e851d330

  • SHA1

    19fc3b21b60dd36ff1114780e9e78e1ce6b496f8

  • SHA256

    ba4d979d9f66cfd9cfa188b565b25d17cd2608ee19f114c75815a2cb017e8116

  • SHA512

    90849661e9aa45c575b2ca13e0bbcc7e1f4bba7e87589ee247a855d6d70b56734b8e649f18b7e66b5e3034c261a019ac5826b4f969ae39da70db01bd8e3b1ae8

  • SSDEEP

    768:oGysYcthPbMLsPwFuY2RrQI6jRdB53st+1GJ0V0ezPQdDVJb0OTrd4fJDVLOPEBq:oyFML+2YIf5YdDn/qGU1jDi3p

Score
10/10
ldr41000gozi

Malware Config

Extracted

Family

gozi

Botnet

1000

C2

https://budalixt.top

Attributes
  • host_keep_time

    2

  • host_shift_time

    1

  • idle_time

    1

  • request_time

    10

aes.plain

Signatures

  • Gozi family
    gozi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ba4d979d9f66cfd9cfa188b565b25d17cd2608ee19f114c75815a2cb017e8116N.exe
    .dll regsvr32 windows:5 windows x64 arch:x64

    5992cfcd0ff330f5b6a5884722853bb3


    Headers

    Imports

    Exports

    Sections