2018-11-20: Gozi ISFB v217

MD5 (2018-11-20.isfbv217.client.decoded.vk.dll) = 2c94587474c02cc9f641e6c69f4e59b4
MD5 (2018-11-20.isfbv217.loader.decoded.vk.exe) = bd9520a9a1f082c53c5b175840083546

Bot                     ['2.17']
Build                   ['39']
Botnet/Group ID         ['4000']
DGA TLDs                ['com', 'ru', 'org']
Server                  [’12’]
Encryption key          ['10291029JSJUYNHG']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['http://allooalel.club']
Path:                   ['/images/']