Overview

overview

10

Static

static

mazu8.dll

windows7_x64

10

mazu8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mazu8.dll

  • Size

    492KB

  • Sample

    210618-95gyw9dcxj

  • MD5

    86c8dfad40c3433eb50b0cc476709c16

  • SHA1

    5c8801339c173af1a1f886d93be9f14b7bc9221b

  • SHA256

    a0bd4ce77bdb2eb80482cea76fd3d3af8eb6ed9ee5a4e1388e3ba90768ec7848

  • SHA512

    56c3b727309f2ae6c636933d78b7f5db503b1ef57ef24ff71b347698c4e5c282d4cb4011e93c5a096105ec83845bb1ff44a89a33d8bec1701b3425ad59ea848b

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      mazu8.dll

    • Size

      492KB

    • MD5

      86c8dfad40c3433eb50b0cc476709c16

    • SHA1

      5c8801339c173af1a1f886d93be9f14b7bc9221b

    • SHA256

      a0bd4ce77bdb2eb80482cea76fd3d3af8eb6ed9ee5a4e1388e3ba90768ec7848

    • SHA512

      56c3b727309f2ae6c636933d78b7f5db503b1ef57ef24ff71b347698c4e5c282d4cb4011e93c5a096105ec83845bb1ff44a89a33d8bec1701b3425ad59ea848b

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks