Overview

overview

10

Static

static

racial.drc.dll

windows7_x64

10

racial.drc.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    racial.drc

  • Size

    515KB

  • Sample

    210603-3x66m9fdxs

  • MD5

    d500f60f598b4f245e99df02345ed148

  • SHA1

    6c2ae001df0ce96046f33a1861f067b4518df26d

  • SHA256

    871193097b82dfa586f0c8701bd7f9b533fda74709ce53ce7e06fa541221e8d0

  • SHA512

    d5b5cfe6d82a3362c76e8c5c265e0ced65a82379831ebed0fd25fb3578b85b097df488e0409f8c353e52b99208317aa9d184cdb48027bdd4dc0e0fc3f62ef4bb

Score
10/10
gozi_ifsb1500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

authd.feronok.com

raw.pablowilliano.at
Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      racial.drc

    • Size

      515KB

    • MD5

      d500f60f598b4f245e99df02345ed148

    • SHA1

      6c2ae001df0ce96046f33a1861f067b4518df26d

    • SHA256

      871193097b82dfa586f0c8701bd7f9b533fda74709ce53ce7e06fa541221e8d0

    • SHA512

      d5b5cfe6d82a3362c76e8c5c265e0ced65a82379831ebed0fd25fb3578b85b097df488e0409f8c353e52b99208317aa9d184cdb48027bdd4dc0e0fc3f62ef4bb

    Score
    10/10
    gozi_ifsb1500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks