General

  • Target

    racial.drc

  • Size

    515KB

  • Sample

    210602-gtbbc34qhx

  • MD5

    49c7e1d29ad9b92b37d392b7a7511f0c

  • SHA1

    556aca6f090288c9c39e2968fda6eabb3d59ff2d

  • SHA256

    7059aa3319ad7b90402ce5e5d706571ec49778420065d34feb098ffbb6693e66

  • SHA512

    ec40f91383521ecc143d8da17ae672cea4058c573ada6959dfa5c11642447b3e74b58eb6e6c67d169aa098751cf6314db6bdea3ea6bdf46cbec90340bb65f74a

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

authd.feronok.com

raw.pablowilliano.at

Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      racial.drc

    • Size

      515KB

    • MD5

      49c7e1d29ad9b92b37d392b7a7511f0c

    • SHA1

      556aca6f090288c9c39e2968fda6eabb3d59ff2d

    • SHA256

      7059aa3319ad7b90402ce5e5d706571ec49778420065d34feb098ffbb6693e66

    • SHA512

      ec40f91383521ecc143d8da17ae672cea4058c573ada6959dfa5c11642447b3e74b58eb6e6c67d169aa098751cf6314db6bdea3ea6bdf46cbec90340bb65f74a

MITRE ATT&CK Matrix

Tasks