Overview

overview

10

Static

static

51992453cf...3b.dll

windows7_x64

10

51992453cf...3b.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51992453cfe179fa3a637985cba9f5a6d5ab495a268e000f480086821c009f3b.dll

  • Size

    312KB

  • Sample

    210223-3rshmnxnqs

  • MD5

    8478376cc9f6f4143330e13a29910e0e

  • SHA1

    d488c393162adc5aa2915bd165f50ee4cc707768

  • SHA256

    51992453cfe179fa3a637985cba9f5a6d5ab495a268e000f480086821c009f3b

  • SHA512

    f0b3d8478a5898c48850f47fd48a1672852893f9992e34ed7f83ae7a761e929f1be2828c0ce4b01175c4fef5aa7cb5eba57885d3562ac0d88ba58a6a7b538e73

Score
10/10
gozi_ifsb2200bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2200

C2

api10.laptok.at/api1

golang.feel500.at/api1

go.in100k.at/api1
Attributes
  • build

    250180

  • exe_type

    loader

  • server_id

    730

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      51992453cfe179fa3a637985cba9f5a6d5ab495a268e000f480086821c009f3b.dll

    • Size

      312KB

    • MD5

      8478376cc9f6f4143330e13a29910e0e

    • SHA1

      d488c393162adc5aa2915bd165f50ee4cc707768

    • SHA256

      51992453cfe179fa3a637985cba9f5a6d5ab495a268e000f480086821c009f3b

    • SHA512

      f0b3d8478a5898c48850f47fd48a1672852893f9992e34ed7f83ae7a761e929f1be2828c0ce4b01175c4fef5aa7cb5eba57885d3562ac0d88ba58a6a7b538e73

    Score
    10/10
    gozi_ifsb2200bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks