General

  • Target

    6a76e615_by_Libranalysis

  • Size

    851KB

  • Sample

    210506-tj2vhczy3j

  • MD5

    6a76e615a7997fc04e3003ce16c9bc3d

  • SHA1

    90d82c7e8a3f2d3c4ec8e4542605eafbcb07bf95

  • SHA256

    f9f77f992f0c7bf8ec0a39acdac1a343f6418e50510db1f92347d5270d0ab9ab

  • SHA512

    b132a87d0c5391049d57f8cf3448a86b5f69822b2dfa51e99235ed497fa25b981664d8545e6d34c12f46cb39835f6b324198fb12de45a9e8588a83d2afb4e595

Malware Config

Extracted

Family

gozi_ifsb

Botnet

5500

C2

green.salurober.com

frm.mironeramp.com

chat.billionady.com

app3.maintorna.com

Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      6a76e615_by_Libranalysis

    • Size

      851KB

    • MD5

      6a76e615a7997fc04e3003ce16c9bc3d

    • SHA1

      90d82c7e8a3f2d3c4ec8e4542605eafbcb07bf95

    • SHA256

      f9f77f992f0c7bf8ec0a39acdac1a343f6418e50510db1f92347d5270d0ab9ab

    • SHA512

      b132a87d0c5391049d57f8cf3448a86b5f69822b2dfa51e99235ed497fa25b981664d8545e6d34c12f46cb39835f6b324198fb12de45a9e8588a83d2afb4e595

MITRE ATT&CK Matrix

Tasks