Overview

overview

10

Static

static

61766c5057b51.pdf.dll

windows7_x64

10

61766c5057b51.pdf.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61766c5057b51.pdf

  • Size

    942KB

  • Sample

    211025-khhazafhe6

  • MD5

    96c1d2b40d981eb28aede953cf76e14a

  • SHA1

    cbc35b375917f21ab85f989febdf8f6cb73dd7be

  • SHA256

    0570fd54d98349e62675cf1e53aa2197ed6c0df811350bfae9f64196b0a49278

  • SHA512

    991cf362193adb894f7b83de453174a96b21cfe4791424e6ab142c8c31b54d49dc4a8fd8698c08bd56c0f10104592647333dbf39d92dcd0c7f39edf087010244

Score
10/10
gozi_ifsb8899bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8899

C2

msn.com/mail

realitystorys.com

outlook.com/signup

gderrrpololo.net
Attributes
  • build

    260212

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      61766c5057b51.pdf

    • Size

      942KB

    • MD5

      96c1d2b40d981eb28aede953cf76e14a

    • SHA1

      cbc35b375917f21ab85f989febdf8f6cb73dd7be

    • SHA256

      0570fd54d98349e62675cf1e53aa2197ed6c0df811350bfae9f64196b0a49278

    • SHA512

      991cf362193adb894f7b83de453174a96b21cfe4791424e6ab142c8c31b54d49dc4a8fd8698c08bd56c0f10104592647333dbf39d92dcd0c7f39edf087010244

    Score
    10/10
    gozi_ifsb8899bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks