Overview

overview

10

Static

static

textboxValue.jpg.dll

windows7_x64

10

textboxValue.jpg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    textboxValue.jpg

  • Size

    623KB

  • Sample

    210614-9mwea35efn

  • MD5

    7e242194013d4ccdecf7011966cabaf3

  • SHA1

    b264a09ad821f64fd8ba3a2d717ee40b0cf6582e

  • SHA256

    46122b4b88cd3e3cb38554bf976528c4046e1183b38a458e1c4cd91bcca8bee7

  • SHA512

    5416250367a2421d5733f709f00769369a0efe164e4ac55ab4e77c0bfa6abb2fcd12442b7760bc748802cf7caea159bcf418937abdbb9ae51c5d04935645de1a

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      textboxValue.jpg

    • Size

      623KB

    • MD5

      7e242194013d4ccdecf7011966cabaf3

    • SHA1

      b264a09ad821f64fd8ba3a2d717ee40b0cf6582e

    • SHA256

      46122b4b88cd3e3cb38554bf976528c4046e1183b38a458e1c4cd91bcca8bee7

    • SHA512

      5416250367a2421d5733f709f00769369a0efe164e4ac55ab4e77c0bfa6abb2fcd12442b7760bc748802cf7caea159bcf418937abdbb9ae51c5d04935645de1a

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks