7-12-2018: #Gozi #ISFB Botnet "1117"

MD5: a9df57baecec2b3d91ac70530adbacc0

Botnet ID       ['1117']
Bot version     ['2.14']
Bot build       ['999']
Server id       ['12']
CRC hash        ['660de2f']
Encryption key  ['10291029JSJUYNHG']
Domains         ['eqwejsindqweq.com', 'vasdaqwuensdqwdq.com']
DGA Base URL    ['com', 'ru', 'org']

URI Path:

/images/