Resubmissions

27/10/2021, 11:33

211027-npbnjseeh610

04/02/2021, 15:53

210204-ry8nav1e2610

22/01/2021, 18:03

210122-wbsmxw8v7s10

General

  • Target
    out.dll
  • Size 95KB
  • Sample210204-ry8nav1e26
  • SHA256 09029ff1f317ccfdd92bfd8ae154328748e761231aabb51872e2b1204315f285
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 1100

C2
  • api10.laptok.at/api1

  • golang.feel500.at/api1

  • go.in100k.at/api1

Attributes
  • build

    250171

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      out.dll
    • Size 95KB
    • SHA256 09029ff1f317ccfdd92bfd8ae154328748e761231aabb51872e2b1204315f285
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks