General
- Target 6a9b0000.da.dll
- Size 43KB
- Sample210503-31m5ef6mwn
- SHA256 7313c2675f4a3c247fc8fe50ed0d7cd4885454151de712f026e9830de0cd04e1
- MD5 6a032fa9c6bd795ad589260cce3c42e4
- SHA1 0f7d7a67bc59c263708666e383ccd3a9b848351a
- SHA512 eec5aba3e2124f749080a0ad6170799ac43764f15710f7651f420c588cd1eb988a2c89dbd32ed3541f766524103da4ec265eb669e5f6190dd9ec6749515abcd0
- MD5 SHA1 SHA512
Static task
static1
Behavioral task
behavioral1
Sample
6a9b0000.da.dll
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
6a9b0000.da.dll
Resource
win10v20210408
0 signatures
0 seconds
Malware Config
Extracted
Family
-
gozi_ifsb
Botnet
-
7406
C2
-
signin.microsoft.com
-
login.microsoft.com
-
keeneticline.com
-
keeneticline.bar
-
infmeetic.co
Attributes
-
build
250193
-
dns_servers
107.174.86.134
107.175.127.22
-
exe_type
loader
-
server_id
12
rsa_pubkey.base64
serpent.plain
Targets
-
- Target 6a9b0000.da.dll
- Size 43KB
- SHA256 7313c2675f4a3c247fc8fe50ed0d7cd4885454151de712f026e9830de0cd04e1
- MD5 6a032fa9c6bd795ad589260cce3c42e4
- SHA1 0f7d7a67bc59c263708666e383ccd3a9b848351a
- SHA512 eec5aba3e2124f749080a0ad6170799ac43764f15710f7651f420c588cd1eb988a2c89dbd32ed3541f766524103da4ec265eb669e5f6190dd9ec6749515abcd0
- MD5 SHA1 SHA512
Score1/10