Overview

overview

10

Static

static

b9b732dbc6...9a.dll

windows7_x64

10

b9b732dbc6...9a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9b732dbc6f94c79b5767eb98ebd899a.dll

  • Size

    467KB

  • Sample

    210512-jmdq8k9atn

  • MD5

    b9b732dbc6f94c79b5767eb98ebd899a

  • SHA1

    984a3ba5d4fe06265ce23cec82bda6a63b2bb3bc

  • SHA256

    1a0d4b328438a72cee012f6387825d942463b896fadc13f2c17e8d005f510cd4

  • SHA512

    595b4429e9f13212740ac4f9e12282dc3fdf9e141041695e4fe6302acf7aac2527275cb6a98eec78049758972c946cc62971604f68f7de68ad2350d13bac497a

Score
10/10
gozi_ifsb8877bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

outlook.com/login

gmail.com

worunekulo.club

horunekulo.website
Attributes
  • build

    250196

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      b9b732dbc6f94c79b5767eb98ebd899a.dll

    • Size

      467KB

    • MD5

      b9b732dbc6f94c79b5767eb98ebd899a

    • SHA1

      984a3ba5d4fe06265ce23cec82bda6a63b2bb3bc

    • SHA256

      1a0d4b328438a72cee012f6387825d942463b896fadc13f2c17e8d005f510cd4

    • SHA512

      595b4429e9f13212740ac4f9e12282dc3fdf9e141041695e4fe6302acf7aac2527275cb6a98eec78049758972c946cc62971604f68f7de68ad2350d13bac497a

    Score
    10/10
    gozi_ifsb8877bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks