Overview

overview

10

Static

static

c8b2216127...24.dll

windows7_x64

10

c8b2216127...24.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8b221612741b1116297e99c98d91224

  • Size

    886KB

  • Sample

    210608-wfzfkywd3e

  • MD5

    c8b221612741b1116297e99c98d91224

  • SHA1

    6d24661f65e17e414f870922fc1990a66ef8d26f

  • SHA256

    11d689b83c6bfd20e566c5cb71773e1f66cc32f43d44ccf5a1566886fb42c49d

  • SHA512

    76a35574e67ac683a653f461d8fccd943d2ced7ce747c1f7eea0ced29d56d8cb80174c83e1b7c6c44311b0bd97daaf8d0664a64a946ee30a165901823a7751e8

Score
10/10
gozi_ifsb1500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      c8b221612741b1116297e99c98d91224

    • Size

      886KB

    • MD5

      c8b221612741b1116297e99c98d91224

    • SHA1

      6d24661f65e17e414f870922fc1990a66ef8d26f

    • SHA256

      11d689b83c6bfd20e566c5cb71773e1f66cc32f43d44ccf5a1566886fb42c49d

    • SHA512

      76a35574e67ac683a653f461d8fccd943d2ced7ce747c1f7eea0ced29d56d8cb80174c83e1b7c6c44311b0bd97daaf8d0664a64a946ee30a165901823a7751e8

    Score
    10/10
    gozi_ifsb1500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks