Overview

overview

10

Static

static

c63f1121_b...is.dll

windows7_x64

10

c63f1121_b...is.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c63f1121_by_Libranalysis

  • Size

    471KB

  • Sample

    210512-7xgj1j7q5e

  • MD5

    c63f11211f899e38c1c230594024950a

  • SHA1

    4d5baeaf852156dbe8053a1c600c7d96049f5967

  • SHA256

    70f617d8686bdc7d17d4f3b992a27f2532686815aaf5289841b87fd0c198ff3a

  • SHA512

    acb47d73ee0ae648188d90ba65584e4261ca8c174305e30e7249d7c8daeccb7b1ac71d8c85d269077b1397adbd29e3deba99ffb89f24c02e8dccbefab14f556b

Score
10/10
gozi_ifsb2500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2500

C2

app.buboleinov.com

chat.veminiare.com

chat.billionady.com

app3.maintorna.com
Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      c63f1121_by_Libranalysis

    • Size

      471KB

    • MD5

      c63f11211f899e38c1c230594024950a

    • SHA1

      4d5baeaf852156dbe8053a1c600c7d96049f5967

    • SHA256

      70f617d8686bdc7d17d4f3b992a27f2532686815aaf5289841b87fd0c198ff3a

    • SHA512

      acb47d73ee0ae648188d90ba65584e4261ca8c174305e30e7249d7c8daeccb7b1ac71d8c85d269077b1397adbd29e3deba99ffb89f24c02e8dccbefab14f556b

    Score
    10/10
    gozi_ifsb2500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks