Overview

overview

10

Static

static

embryonic.qt.dll

windows7_x64

10

embryonic.qt.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    embryonic.qt.dll

  • Size

    344KB

  • Sample

    210919-bn8knsaba6

  • MD5

    daa48985080f68f222c688092df85633

  • SHA1

    94b945766584b71b88898aa44d075871d80303a6

  • SHA256

    e63a9ff15de73a3b5e076cc16ddeb90dee8e246b5a889d6bd961fa3cfc777de8

  • SHA512

    6c9199aaa037fe3cc7e1920a1b9230dd6b65d919dfd8970492f274766e7b653653908a160b8ac0acfb21c8a834147f77250a4be822be5cf5289135831634b2eb

Score
10/10
gozi_ifsb1500bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1500

C2

atl.bigbigpoppa.com

pop.urlovedstuff.com
Attributes
  • build

    250211

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Targets

    • Target

      embryonic.qt.dll

    • Size

      344KB

    • MD5

      daa48985080f68f222c688092df85633

    • SHA1

      94b945766584b71b88898aa44d075871d80303a6

    • SHA256

      e63a9ff15de73a3b5e076cc16ddeb90dee8e246b5a889d6bd961fa3cfc777de8

    • SHA512

      6c9199aaa037fe3cc7e1920a1b9230dd6b65d919dfd8970492f274766e7b653653908a160b8ac0acfb21c8a834147f77250a4be822be5cf5289135831634b2eb

    Score
    10/10
    gozi_ifsb1500bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks