General

  • Target

    587debb584be50cb0aa0dd1f8cab3c7e.dll

  • Size

    937KB

  • Sample

    210525-3ab5ktq582

  • MD5

    587debb584be50cb0aa0dd1f8cab3c7e

  • SHA1

    b989c1dd5b247ddaa8e64566803972c991b878d4

  • SHA256

    b82a88b63e89ecdaa736b3b8a28d62db73854cb6f37bb32e4def2c76ce05ccd9

  • SHA512

    b920333fc7f00df62689e2fe5ad419b4c4511c8749b89ebd61b9a01355dee7cb50b04e708871065b562c8c3cd93dc5ca371eb85261c768a10ebb64b10cc4b5c0

Malware Config

Extracted

Family

gozi_ifsb

Botnet

4500

C2

app3.maintorna.com

chat.billionady.com

app5.folion.xyz

wer.defone.click

Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      587debb584be50cb0aa0dd1f8cab3c7e.dll

    • Size

      937KB

    • MD5

      587debb584be50cb0aa0dd1f8cab3c7e

    • SHA1

      b989c1dd5b247ddaa8e64566803972c991b878d4

    • SHA256

      b82a88b63e89ecdaa736b3b8a28d62db73854cb6f37bb32e4def2c76ce05ccd9

    • SHA512

      b920333fc7f00df62689e2fe5ad419b4c4511c8749b89ebd61b9a01355dee7cb50b04e708871065b562c8c3cd93dc5ca371eb85261c768a10ebb64b10cc4b5c0

MITRE ATT&CK Matrix

Tasks