Behavioral task
behavioral1
Sample
ursnif3.3140000.dll
Resource
win7-en-20210920
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ursnif3.3140000.dll
Resource
win10-en-20210920
windows10_x64
0 signatures
0 seconds
General
-
Target
ursnif3.3140000.dll
-
Size
54KB
-
MD5
cdcf0ed72b9e49694450692b4684c0cd
-
SHA1
54c2f26e6ba01dcfc56e2c4245aec9115827f0ce
-
SHA256
db9700d5fd7f87c18d639c64b25cb485f3c4a0e69c6fe10e10637a295986078f
-
SHA512
b8dd539547e4976f39ad179d972fad442c3d2b28a9c55dafcfe58d373e468e0beb83da7bc3b8b1baa56116540e4a6c48c73bfc23a8ca4e73f0137ce356ad6f6d
Malware Config
Extracted
Family
gozi_ifsb
Botnet
8899
C2
msn.com/login
vloderuniok.website
gloderuniok.website
Attributes
-
build
260212
-
dga_season
10
-
exe_type
loader
-
server_id
12
rsa_pubkey.plain
serpent.plain
Signatures
-
Gozi_ifsb family
Files
-
ursnif3.3140000.dll.dll windows x86