Overview

overview

10

Static

static

SecuriteIn...28.dll

windows7_x64

10

SecuriteIn...28.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Trojan.GenericKD.45776692.24969.28128

  • Size

    301KB

  • Sample

    210315-hjr1yvf1as

  • MD5

    ad1f7b71251a1f5c246d42b26fb9aea2

  • SHA1

    f745617a9c08e4bfb071edd2660adc5bd4487ac2

  • SHA256

    440157f39cb4231bc339eb6c862cbaa8185fef1e3178775d6f09ae0a22948e25

  • SHA512

    4f3840700024c661284c4a676deb1ae6d660b4aa82e7aef2a9f061e1db460307db423fb37b04a32d6d7a994687f587842b60079c67aaf4336185c51de1264f04

Score
10/10
gozi_ifsb3300bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3300

C2

api10.laptok.at/api1

golang.feel500.at/api1

go.in100k.at/api1
Attributes
  • build

    250180

  • exe_type

    loader

  • server_id

    730

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      SecuriteInfo.com.Trojan.GenericKD.45776692.24969.28128

    • Size

      301KB

    • MD5

      ad1f7b71251a1f5c246d42b26fb9aea2

    • SHA1

      f745617a9c08e4bfb071edd2660adc5bd4487ac2

    • SHA256

      440157f39cb4231bc339eb6c862cbaa8185fef1e3178775d6f09ae0a22948e25

    • SHA512

      4f3840700024c661284c4a676deb1ae6d660b4aa82e7aef2a9f061e1db460307db423fb37b04a32d6d7a994687f587842b60079c67aaf4336185c51de1264f04

    Score
    10/10
    gozi_ifsb3300bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks