10-23-2018: Gozi ISFB

MD5 (10-23-2018.isfb.client.unpacked.dll.vk.dll) = b6562cb534ea11dd42f7ee069d29f22d
MD5 (10-23-2018.isfb.loader.packed.exe.vk.exe) = 8d3eb8518f6d081e67b28ffb018f3c60
MD5 (10-23-2018.isfb.loader.unpacked.dll.vk.dll) = b55456e4deffc2f97e3126228d1ae424

Bot                     ['2.17']
Build                   ['36']
Botnet/Group ID         ['8881]
DGA TLDs                ['com', 'ru', 'org']
Server                  [’12’]
Encryption key          ['10291029JSJUYNHG']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['http://loads.smallworld-parties.com', 'https://pool.jfklandscape.com']
Path:                   ['/images/']