Overview

overview

10

Static

static

59767b2ac0...75.dll

windows7_x64

10

59767b2ac0...75.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59767b2ac03eb8320a661f410d53a025c8975b12de796e80b1c84306200f6a75.zip

  • Size

    310KB

  • Sample

    210505-8kxdmpmsle

  • MD5

    f465c89ba2a62f916cc5f72c23d73b46

  • SHA1

    f4d510f20de9bfc09b891936af6d83fd5d993389

  • SHA256

    34b5104cdaacdedc1bc930061e31355da40dc5071bcc77c188aac7f2734cc337

  • SHA512

    9a99bd5e34bb18cd6e1cbdc39a45dcf750c6e75afa77de369258ed5f0d9691b45cba460ea9356cf591269d34f8f58bf9a61d41c35a7f09686a70d4a7e08c4ac5

Score
10/10
gozi_ifsb2500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2500

C2

app.buboleinov.com

chat.veminiare.com

chat.billionady.com

app3.maintorna.com
Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      59767b2ac03eb8320a661f410d53a025c8975b12de796e80b1c84306200f6a75.dll

    • Size

      488KB

    • MD5

      aaba239e1c2208a6f00bb10034cba621

    • SHA1

      2520815cda4b4cdf652de337d4c9285e74d2a585

    • SHA256

      59767b2ac03eb8320a661f410d53a025c8975b12de796e80b1c84306200f6a75

    • SHA512

      1c80f3ff51f5d9b53232a1d9fb10c02bf22d8fbd686b76b8c6718b11bf6e834ca5b02c19535f70cbc08ade26360d0b42c5b944d63516853fb84acc573614ad16

    Score
    10/10
    gozi_ifsb2500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks