Overview

overview

10

Static

static

2200.dll

windows7_x64

10

2200.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2200.dll

  • Size

    596KB

  • Sample

    210212-zve65lzhye

  • MD5

    e07d47927df912332bc84b3f98586091

  • SHA1

    b55a9ae7a9ccd44dd3516e557e295e3f1cce750e

  • SHA256

    cc849b895a0c8237f81ca3fe6395929713fb7b3f0a7744d3ddc3cb08f9f4351d

  • SHA512

    05fc68821232f43b1b598a5c3989d18e5487f87316803a8d2e732cd1afed88034f6482be256c9894a4a56b6fe4efdec748a982c90c7609c64d24ff77b5b56396

Score
10/10
gozi_ifsb2200bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2200

C2

api10.laptok.at/api1

golang.feel500.at/api1

go.in100k.at/api1
Attributes
  • build

    250171

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    730

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      2200.dll

    • Size

      596KB

    • MD5

      e07d47927df912332bc84b3f98586091

    • SHA1

      b55a9ae7a9ccd44dd3516e557e295e3f1cce750e

    • SHA256

      cc849b895a0c8237f81ca3fe6395929713fb7b3f0a7744d3ddc3cb08f9f4351d

    • SHA512

      05fc68821232f43b1b598a5c3989d18e5487f87316803a8d2e732cd1afed88034f6482be256c9894a4a56b6fe4efdec748a982c90c7609c64d24ff77b5b56396

    Score
    10/10
    gozi_ifsb2200bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks