7-17-2018: GOZI ISFB Botnet "1120"

MD5: ad22f7e25e6fccf900b5060d4c5e9532

Botnet ID       ['1120']
Bot version     ['2.14']
Bot build       ['999']
Server id       ['12']
Encryption key  ['10291029JSJUYNHG']
Domains         ['aniynasjdnqwetrew.com', 'qiqwenqweqausdnq.com']

Domain: ['95.141.47.196']

URI Path:

/images/