General
- Target 1f23a1a0000.dll
- Size 256KB
- Sample220308-pc7e5aefg9
- SHA256 436d6d226550ed2e15292a65859fc41cde7cde6b34e83e10dff0518036cd1787
- MD5 c7c9a41c20e3986dd1db45b5e44b60d3
- SHA1 f3a8eef57d069a1113b08d894155065529a18cff
- SHA512 4157cf5954883ca3f68633b7438bd44620c104d1fb715913d10ce423561a9673f6243810ef098a01a5dd1b7b53e18e7f34c65b6f3bcea0af43ca9b1aad71d180
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
1f23a1a0000.dll
Resource
win7-20220223-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
1f23a1a0000.dll
Resource
win10v2004-en-20220112
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
777999
C2
-
config.edge.skype.com
-
67.43.234.14
-
67.43.234.37
-
67.43.234.47
Attributes
-
base_path
/images/
-
exe_type
worker
-
extension
.src
-
server_id
50
rsa_pubkey.plain
aes.plain
Targets
-
- Target 1f23a1a0000.dll
- Size 256KB
- SHA256 436d6d226550ed2e15292a65859fc41cde7cde6b34e83e10dff0518036cd1787
- MD5 c7c9a41c20e3986dd1db45b5e44b60d3
- SHA1 f3a8eef57d069a1113b08d894155065529a18cff
- SHA512 4157cf5954883ca3f68633b7438bd44620c104d1fb715913d10ce423561a9673f6243810ef098a01a5dd1b7b53e18e7f34c65b6f3bcea0af43ca9b1aad71d180
- MD5 SHA1 SHA512
Score1/10