Overview

overview

10

Static

static

22.dll

windows7_x64

10

22.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22.dll

  • Size

    285KB

  • Sample

    210304-zxzkvp61dn

  • MD5

    620486432073a19eab114ba312dadb7e

  • SHA1

    ccaab62608ebf84af6f86a4833835bdec6ea63d9

  • SHA256

    1f22836a61a81e1985074d64fcfcf30f7f94bf198b409531cd5632da1c3f2df7

  • SHA512

    e2bd182265df86ddfccfc5a541f1eb990decf80d8225ac089054235c7e0578aa49080972b1a591d0d718c60d422dd1847d2d5af11e180668ebef848fcb0427ec

Score
10/10
gozi_ifsb2200bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2200

C2

api10.laptok.at/api1

golang.feel500.at/api1

go.in100k.at/api1
Attributes
  • build

    250180

  • exe_type

    loader

  • server_id

    730

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      22.dll

    • Size

      285KB

    • MD5

      620486432073a19eab114ba312dadb7e

    • SHA1

      ccaab62608ebf84af6f86a4833835bdec6ea63d9

    • SHA256

      1f22836a61a81e1985074d64fcfcf30f7f94bf198b409531cd5632da1c3f2df7

    • SHA512

      e2bd182265df86ddfccfc5a541f1eb990decf80d8225ac089054235c7e0578aa49080972b1a591d0d718c60d422dd1847d2d5af11e180668ebef848fcb0427ec

    Score
    10/10
    gozi_ifsb2200bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks