Overview

overview

10

Static

static

shorefront.eps.dll

windows7_x64

10

shorefront.eps.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    shorefront.eps

  • Size

    384KB

  • Sample

    210603-kyz7tzv6lx

  • MD5

    93b0ad344d44befa41b292d0a4609e56

  • SHA1

    3306d48bd1ff87555d9a8accd30583b6789d4683

  • SHA256

    1da1183f1cd5f96f113a3b8978359b50380bfbc82e6987e274892edf56fcf3b5

  • SHA512

    3f00ed2b35fd951f804ae8030c0eee4a1acf77234c4daf09f0b653ae5bce439209d30b2faa6d44677f75143ddb9543ef0f04a492dc34849f8b39801c986cf487

Score
10/10
gozi_ifsb4500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

4500

C2

app.buboleinov.com

chat.veminiare.com

chat.billionady.com

app3.maintorna.com
Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      shorefront.eps

    • Size

      384KB

    • MD5

      93b0ad344d44befa41b292d0a4609e56

    • SHA1

      3306d48bd1ff87555d9a8accd30583b6789d4683

    • SHA256

      1da1183f1cd5f96f113a3b8978359b50380bfbc82e6987e274892edf56fcf3b5

    • SHA512

      3f00ed2b35fd951f804ae8030c0eee4a1acf77234c4daf09f0b653ae5bce439209d30b2faa6d44677f75143ddb9543ef0f04a492dc34849f8b39801c986cf487

    Score
    10/10
    gozi_ifsb4500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks