General

  • Target

    f465c89b_by_Libranalysis

  • Size

    310KB

  • Sample

    210505-aqqgs4xmbx

  • MD5

    f465c89ba2a62f916cc5f72c23d73b46

  • SHA1

    f4d510f20de9bfc09b891936af6d83fd5d993389

  • SHA256

    34b5104cdaacdedc1bc930061e31355da40dc5071bcc77c188aac7f2734cc337

  • SHA512

    9a99bd5e34bb18cd6e1cbdc39a45dcf750c6e75afa77de369258ed5f0d9691b45cba460ea9356cf591269d34f8f58bf9a61d41c35a7f09686a70d4a7e08c4ac5

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2500

C2

app.buboleinov.com

chat.veminiare.com

chat.billionady.com

app3.maintorna.com

Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      59767b2ac03eb8320a661f410d53a025c8975b12de796e80b1c84306200f6a75.dll

    • Size

      488KB

    • MD5

      aaba239e1c2208a6f00bb10034cba621

    • SHA1

      2520815cda4b4cdf652de337d4c9285e74d2a585

    • SHA256

      59767b2ac03eb8320a661f410d53a025c8975b12de796e80b1c84306200f6a75

    • SHA512

      1c80f3ff51f5d9b53232a1d9fb10c02bf22d8fbd686b76b8c6718b11bf6e834ca5b02c19535f70cbc08ade26360d0b42c5b944d63516853fb84acc573614ad16

MITRE ATT&CK Matrix

Tasks