Overview

overview

10

Static

static

e81869620b...a0.dll

windows7_x64

10

e81869620b...a0.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e81869620b9a18c3702c7be2fcf2e170cbc5c3de1ddbc84ae1fe190b57e917a0.zip

  • Size

    378KB

  • Sample

    210512-w7b16zhajj

  • MD5

    35ba12da729f6671ea98c5d6d6fc7901

  • SHA1

    7fa6e05cff9d7a7c82b81b72982bff66f7e37ad1

  • SHA256

    2e7c2c4b18edac93c24aebd634b86f8aeac1781435c3020ccbed4e8634dcb7be

  • SHA512

    5e9d7db161b78283f2b6c1f5a8ba2e775be19dda057c4afb77785587935f848a62f2b7d22140fc88654f7c700bcfd95ba6575dbbe251624769200c99a99a8b12

Score
10/10
gozi_ifsb8877bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

outlook.com/login

gmail.com

worunekulo.club

horunekulo.website
Attributes
  • build

    250196

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      e81869620b9a18c3702c7be2fcf2e170cbc5c3de1ddbc84ae1fe190b57e917a0.dll

    • Size

      821KB

    • MD5

      1752fe2b8419be8241ecd08859a5800f

    • SHA1

      eb7346a6d5a53ddaf8fd073f266c64d642b40a7d

    • SHA256

      e81869620b9a18c3702c7be2fcf2e170cbc5c3de1ddbc84ae1fe190b57e917a0

    • SHA512

      0718e566bdec828d59890818a65af53f467d1bab92abbdd2ecfe3eca55be7ad3692793e4310ea41f2ab2a9f5e9fe6d29e1873cacc1614c6f2cceaf6b320c8f15

    Score
    10/10
    gozi_ifsb8877bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks