2018-12-06: Gozi ISFB v3

MD5 (2018-12-06.isfbv3.loader.decoded.vk.exe) = e704601e3d8b4ffb6163c1f8a325e497


Bot                     ['3.00']
Build                   ['665']
Botnet/Group ID         ['40001']
DGA TLDs                ['com', 'ru', 'org']
Encryption key          ['hKS7YEYv3ymFTUVd']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['https://billdixononline[.]com/']