Details
Malware Family Bozok
Date Added March 23, 2015, 8:29 p.m.
MD5 4a89a703497c155addae5213111c2416
Sha256 e936a4faa9622c9ec55df474c824c0fa4fe424a353cce15077da5262ab129dc3
Robot Robots lovingly delivered by robohash.org
Config Sections
Domain cowboy1983.no-ip.biz*
InstallName server.exe
Visible Flag 0
Extension ext.dat
Port 1515
Startup Flag 0
Mutex mUR1OBgCSsMWb
StartupName
ServerID mr.eldezl
Password mypass
Unknown Flag1 0
Install Flag 0
Unknown Flag3 0
Unknown Flag2 0
Advertising
VirusTotal

22 out of 47 AV's Identified the sample as Malicious

Virus Total Report

Domain Data
Domain IP Country Code
cowboy1983.no-ip.biz 197.161.51.41 EG
Geo Location
Yara Rules
Comments
comments powered by Disqus