Gozi_Ursnif_Dreambot_16-07-2019

#Gozi #Ursnif #Dreambot
-------------------------------
16-07-2019
-------------------------------
Main object- "fd25b661c603006abbf327682f1f3863d8b7309f37594106ec267a2b89cdf784.bin.gz"
	sha256	fae6d8cbed2afe9784015e82491085d1db5e45193fa67647c36b77258f393399
	sha1	ae4da1caef531c5c18a0d6d4291a1896f4bba6ad
	md5	73dff60286dbcb0cb1d29f4231ba6cdc
Dropped executable file
	sha256	C:\Users\admin\Desktop\fd25b661c603006abbf327682f1f3863d8b7309f37594106ec267a2b89cdf784.bin.gz	fd25b661c603006abbf327682f1f3863d8b7309f37594106ec267a2b89cdf784
DNS requests
	domain	ajax.aspnetcdn.com
Connections
	ip	13.77.161.179
	ip	23.222.40.242
	ip	2.21.38.54
	ip	2.18.232.244