General

  • Target
    footer.jpg.dll
  • Size 286KB
  • Sample210210-1m263rm71e
  • SHA256 8df914f790a6e5eb07042cce36ea9a23e23cdc1610d930f306f9ef55b6d8a2c5
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 7251

C2
  • web.vortex.data.microsoft.com

  • ocsp.sca1b.amazontrust.com

  • nerowins.com

Attributes
  • build

    250177

  • dns_servers

    107.174.86.134

    107.175.127.22

  • exe_type

    loader

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      footer.jpg.dll
    • Size 286KB
    • SHA256 8df914f790a6e5eb07042cce36ea9a23e23cdc1610d930f306f9ef55b6d8a2c5
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks