Overview

overview

10

Static

static

3b56b7298c...34.dll

windows7_x64

10

3b56b7298c...34.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b56b7298c366a323d28658a455abf0d4e78fa197a43ce13bedab05f26901d34 (1).zip

  • Size

    378KB

  • Sample

    210512-ldghxpbjcj

  • MD5

    c72ebdf755eca278a8a297cdcdbe3944

  • SHA1

    72461bda24e3907d5c1eacdb0c0b9583840e4ba0

  • SHA256

    f7ad56ab9d944b3e287213cbeaef47a6bc84eb4701d356246df3c063dba00aa1

  • SHA512

    2cf052eca7faffb87043f65e2a6fac6756375646dbba4b8ec50f34ce9c9ab43e849e66b854c268dd37d703721f1df8945f837128b308eac3c2743d5c71d0a70d

Score
10/10
gozi_ifsb8877bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

outlook.com/login

gmail.com

worunekulo.club

horunekulo.website
Attributes
  • build

    250196

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      3b56b7298c366a323d28658a455abf0d4e78fa197a43ce13bedab05f26901d34.dll

    • Size

      821KB

    • MD5

      50a299d1e92d9205e123404c8e05904d

    • SHA1

      c188272ab757dbbf14e74781fc90fcefe4aeb615

    • SHA256

      3b56b7298c366a323d28658a455abf0d4e78fa197a43ce13bedab05f26901d34

    • SHA512

      ec30f36d70ddbb6ba4aaccb3342e0a0ffbd586d2784370500a94e33aa650d1c56d3712ffc3a9e15a0558194ce26d1b76d9f2a8953220684bef634e57f4579df1

    Score
    10/10
    gozi_ifsb8877bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks