General

  • Target

    6d490000.da.dll

  • Size

    42KB

  • Sample

    211005-j82lvshgdp

  • MD5

    9e2be92580cec672e36faf332a0f4444

  • SHA1

    9d083640d20266096480b6ba19a4aa5d5c6b50e4

  • SHA256

    93b16773b3d5519eb7a85aba5b3393e22229f15c0b56a011e9d94bdfc3fd0606

  • SHA512

    eb3137546519cd1f406bfaa4d1c8c095928c550081b7b7a45ab3feddc963b3440c665f9d9e31c9e2fe146a196ec8a3f728ea0011abdbc93b5439ae9f6c1b5385

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8877

C2

outlook.com/login

gmail.com

dorelunonu.us

morelunonu.us

Attributes
  • build

    250195

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      6d490000.da.dll

    • Size

      42KB

    • MD5

      9e2be92580cec672e36faf332a0f4444

    • SHA1

      9d083640d20266096480b6ba19a4aa5d5c6b50e4

    • SHA256

      93b16773b3d5519eb7a85aba5b3393e22229f15c0b56a011e9d94bdfc3fd0606

    • SHA512

      eb3137546519cd1f406bfaa4d1c8c095928c550081b7b7a45ab3feddc963b3440c665f9d9e31c9e2fe146a196ec8a3f728ea0011abdbc93b5439ae9f6c1b5385

    Score
    1/10

MITRE ATT&CK Matrix

Tasks