2018-12-10: ISFB Gozi v2.15 & 3.00

MD5 (2018-12-10.isfbv215.loader.unpacked.vk.exe) = 976af17f190cd552eef6a2252db11018
MD5 (2018-12-10.isfbv300.loader.unpacked.vk.exe) = 394e8387cb4ad230bc826709ea0a88ce

Bot                     ['2.15']
Build                   ['165']
Botnet/Group ID         ['3148', '3149']
DGA TLDs                ['com', 'ru', 'org']
Server                  [’12’]
Encryption key          ['10291029JSJUYNHG']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['aplatmesse.com', 'touggledle.com', 'nowerdleat.com']
Path:                   ['/images/']

Bot                     ['3.00']
Build                   ['667']
Botnet/Group ID         ['10000']
DGA TLDs                ['com', 'ru', 'org']
Encryption key          ['EkS3rrEz4bwL1yeK']
DGA CRC                 ['0x4eb7d2ca']
DGA Base URL            ['constitution.org/usdeclar.txt']
Domains                 ['https://akamaicln.com/']5