Overview

overview

10

Static

static

3a94.dll

windows7_x64

10

3a94.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a94.dll

  • Size

    607KB

  • Sample

    210705-xws9c8ky7n

  • MD5

    3a943173c6de419b7078e88c20997838

  • SHA1

    56567824c6b5c62112a74daa7a1a66e2ec0505d3

  • SHA256

    af98c908f45b6b7893b8cc3121517488c94a93d015af71cd86f8269a971a8836

  • SHA512

    801f8f86158c23a44499fc8c5364cb6353a44fba09015d118341e1bd07a568fe4c2fe4b93ca691bb45b41b5f6ee2a6f73d7ffbfde3eb9cd7293295ffc530693c

Score
10/10
gozi_ifsb6000bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

6000

C2

gtr.antoinfer.com

app.bighomegl.at
Attributes
  • build

    250204

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Targets

    • Target

      3a94.dll

    • Size

      607KB

    • MD5

      3a943173c6de419b7078e88c20997838

    • SHA1

      56567824c6b5c62112a74daa7a1a66e2ec0505d3

    • SHA256

      af98c908f45b6b7893b8cc3121517488c94a93d015af71cd86f8269a971a8836

    • SHA512

      801f8f86158c23a44499fc8c5364cb6353a44fba09015d118341e1bd07a568fe4c2fe4b93ca691bb45b41b5f6ee2a6f73d7ffbfde3eb9cd7293295ffc530693c

    Score
    10/10
    gozi_ifsb6000bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks