2018-12-11: ISFB Gozi v2.15

MD5 (2018-12-11.isfbv215.loader.unpacked.vk.exe) = 9a1c1f5081228bcaf81171ca21e8669a


Bot                     ['2.15']
Build                   ['165']
Botnet/Group ID         ['3150', '3151']
DGA TLDs                ['com', 'ru', 'org']
Server                  [’12’]
Encryption key          ['10291029JSJUYNHG']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['zardinglog.com', 'sycingshbo.com', 'imminesenc.com']
Path:                   ['/images/']