General

  • Target
    6e4568c87d8d2b5d6428ce46362b1ae29559047aafc275948cd4510573e460a8.dll
  • Size 264KB
  • Sample210331-k4b3r8kyan
  • SHA256 6e4568c87d8d2b5d6428ce46362b1ae29559047aafc275948cd4510573e460a8
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 8877

C2
  • ocsp.digicert.com

  • aus5.mozilla.org

  • palominoloopus.website

  • dresdengrauwes.website

Attributes
  • build

    250187

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      6e4568c87d8d2b5d6428ce46362b1ae29559047aafc275948cd4510573e460a8.dll
    • Size 264KB
    • SHA256 6e4568c87d8d2b5d6428ce46362b1ae29559047aafc275948cd4510573e460a8
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks