General

  • Target

    5a414b378a75f928594e1ddacccb40dc.dll

  • Size

    937KB

  • Sample

    210610-v1p7n9d482

  • MD5

    5a414b378a75f928594e1ddacccb40dc

  • SHA1

    341a60d3181bf62aa8344f4544598f7e217c1b03

  • SHA256

    0d4d60b0de26c90819f65b22796c1600e4942e95952c6cf19f2618b0461a441f

  • SHA512

    bf2fceb2ac9c61f66203cf9001ee0bd3c0979469e537f3ed14c59492c588a9e818a6b5661c0e453d8f6f6597a48352abe985b5a84c8d9f50b2f23b1925205608

Malware Config

Extracted

Family

gozi_ifsb

Botnet

4500

C2

app3.maintorna.com

chat.billionady.com

app5.folion.xyz

wer.defone.click

Attributes
  • build

    250188

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      5a414b378a75f928594e1ddacccb40dc.dll

    • Size

      937KB

    • MD5

      5a414b378a75f928594e1ddacccb40dc

    • SHA1

      341a60d3181bf62aa8344f4544598f7e217c1b03

    • SHA256

      0d4d60b0de26c90819f65b22796c1600e4942e95952c6cf19f2618b0461a441f

    • SHA512

      bf2fceb2ac9c61f66203cf9001ee0bd3c0979469e537f3ed14c59492c588a9e818a6b5661c0e453d8f6f6597a48352abe985b5a84c8d9f50b2f23b1925205608

MITRE ATT&CK Matrix

Tasks