Overview

overview

10

Static

static

xadar8.dll

windows7_x64

10

xadar8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xadar8

  • Size

    599KB

  • Sample

    210610-j9vndmnktj

  • MD5

    d73b40b069792b8535ecc530a5e77942

  • SHA1

    7844a90b3c4c8b5ca11197bfd458025edcf0506d

  • SHA256

    2aba8bfb0661db54f5cd2102453b791f9bbb1418bc6cd00a2e0124f0923824e0

  • SHA512

    bba470060653d428242afb34ae6edd83f27abb3bf5049bf401d50299681a7da735e3084b910361c35e7216ceb25ebf72429429a45b9a3b3a702a1b54b31b5592

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      xadar8

    • Size

      599KB

    • MD5

      d73b40b069792b8535ecc530a5e77942

    • SHA1

      7844a90b3c4c8b5ca11197bfd458025edcf0506d

    • SHA256

      2aba8bfb0661db54f5cd2102453b791f9bbb1418bc6cd00a2e0124f0923824e0

    • SHA512

      bba470060653d428242afb34ae6edd83f27abb3bf5049bf401d50299681a7da735e3084b910361c35e7216ceb25ebf72429429a45b9a3b3a702a1b54b31b5592

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks