General

  • Target

    55h5hh5k455.tar

  • Size

    372KB

  • Sample

    210330-hq3bea8sbs

  • MD5

    eaa0b683f58d97d89c2dd3154a087879

  • SHA1

    070c9f4596f3c9a377e3d75b5d1011efc5f8de4a

  • SHA256

    fd65bb77bed136b09207cdc7bea28c0d4915e439a6722be75eb858aa9338d131

  • SHA512

    d8cdb2e8c25d8c2584f19f469b1782d173c99e83f2b83068f7e61a3a78c9c92499a5f0550ac81b23c46cea2ea5ee98333d7df61c71f1f9c4886cfa367756d3a6

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

ocsp.digicert.com

aus5.mozilla.org

palominoloopus.website

dresdengrauwes.website

Attributes
  • build

    250187

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      55h5hh5k455.tar

    • Size

      372KB

    • MD5

      eaa0b683f58d97d89c2dd3154a087879

    • SHA1

      070c9f4596f3c9a377e3d75b5d1011efc5f8de4a

    • SHA256

      fd65bb77bed136b09207cdc7bea28c0d4915e439a6722be75eb858aa9338d131

    • SHA512

      d8cdb2e8c25d8c2584f19f469b1782d173c99e83f2b83068f7e61a3a78c9c92499a5f0550ac81b23c46cea2ea5ee98333d7df61c71f1f9c4886cfa367756d3a6

MITRE ATT&CK Matrix

Tasks