Overview

overview

10

Static

static

boxMain.jpg.dll

windows7_x64

10

boxMain.jpg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    boxMain.jpg

  • Size

    306KB

  • Sample

    210621-yfacebenc2

  • MD5

    98d030eeefc3536d68ccb9ae3a2d1502

  • SHA1

    9f7d95691e0116f7c0d0f222de2149b073ef6cb6

  • SHA256

    a58f423a00ca933ae2898803bd1b3a07a2cd76ef1aa0d5de69905d80a096874c

  • SHA512

    bbfbd2525c24a5c0474d001f61edabed1ff05f83fb574eb16790e36298da80d8a56d10f28582340f438a3483d232a4efd19055b687fc773aef25856148c2ba52

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

authd.feronok.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.base64
serpent.plain

Targets

    • Target

      boxMain.jpg

    • Size

      306KB

    • MD5

      98d030eeefc3536d68ccb9ae3a2d1502

    • SHA1

      9f7d95691e0116f7c0d0f222de2149b073ef6cb6

    • SHA256

      a58f423a00ca933ae2898803bd1b3a07a2cd76ef1aa0d5de69905d80a096874c

    • SHA512

      bbfbd2525c24a5c0474d001f61edabed1ff05f83fb574eb16790e36298da80d8a56d10f28582340f438a3483d232a4efd19055b687fc773aef25856148c2ba52

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks