Overview

overview

10

Static

static

xadar5.dll

windows7_x64

10

xadar5.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xadar5

  • Size

    599KB

  • Sample

    210610-cj1l8acsyx

  • MD5

    f65de6de03df304fa06f6908011f2713

  • SHA1

    6bc18631dd4f9dac4af8e95b81a0d06aab636059

  • SHA256

    8f92de808d26003355c0d9832c5a3dba3e337acae4935ccd7a37012aea681ca3

  • SHA512

    56c9ce50c57c3419c046b6a928549c0f1c749eb3970eafa29e21a22cbbc477ad2138db0f1eb4e87e2a2d4c246b909e9ac8f4b4ec1604ef70a47b1bd84b1e578c

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      xadar5

    • Size

      599KB

    • MD5

      f65de6de03df304fa06f6908011f2713

    • SHA1

      6bc18631dd4f9dac4af8e95b81a0d06aab636059

    • SHA256

      8f92de808d26003355c0d9832c5a3dba3e337acae4935ccd7a37012aea681ca3

    • SHA512

      56c9ce50c57c3419c046b6a928549c0f1c749eb3970eafa29e21a22cbbc477ad2138db0f1eb4e87e2a2d4c246b909e9ac8f4b4ec1604ef70a47b1bd84b1e578c

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks