General
- Target deli.png.dll
- Size 264KB
- Sample210302-bj89jvs9va
- SHA256 35375028a2cc4876b5a8476876ad75a037b8c4e303589ce6e9d9c61aaba9f74c
- MD5 225969564af689a1c330bf8e095281ff
- SHA1 bcd1b29c7faf778be8eece7faf1b42e13b6030d9
- SHA512 413f110a04403cdb0a14a336d25bffe3d71965a566b2e92b0225fff2a9a6750bd401aa94a0ac493b2206506fc7eab5360d7ddd3c1bee0b5162f7da9e44e047e0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
deli.png.dll
Resource
win7v20201028
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7253
C2
-
web.vortex.data.microsoft.com
-
ocsp.sca1b.amazontrust.com
-
stasecrets.com
Attributes
-
build
250186
-
dns_servers
107.174.86.134
107.175.127.22
-
exe_type
loader
-
server_id
12
rsa_pubkey.base64
serpent.plain
Targets
-
- Target deli.png.dll
- Size 264KB
- SHA256 35375028a2cc4876b5a8476876ad75a037b8c4e303589ce6e9d9c61aaba9f74c
- MD5 225969564af689a1c330bf8e095281ff
- SHA1 bcd1b29c7faf778be8eece7faf1b42e13b6030d9
- SHA512 413f110a04403cdb0a14a336d25bffe3d71965a566b2e92b0225fff2a9a6750bd401aa94a0ac493b2206506fc7eab5360d7ddd3c1bee0b5162f7da9e44e047e0
- MD5 SHA1 SHA512