Overview

overview

10

Static

static

c3a4ce9f2d...d6.dll

windows7_x64

10

c3a4ce9f2d...d6.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3a4ce9f2dd1721a3a25db6cbc0b5dd6.dll

  • Size

    467KB

  • Sample

    211027-nvlqpsefb2

  • MD5

    c3a4ce9f2dd1721a3a25db6cbc0b5dd6

  • SHA1

    413a02511ce445448f2b338be073330c018c72f7

  • SHA256

    2eeee8a83dcf0cbfff2dccaf4408c7ac17130d2ee06d31698d2b58e97e280f75

  • SHA512

    b28c5203779fe4a5538646b825e23b7fbefcdad832f9c3101e7109b3e491257426e4a45ccbdcf788baa8ffbb7fef3e254dd6a13806e8c3720002d1f207cdf12e

Score
10/10
gozi_ifsb8899bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8899

C2

msn.com/mail

realitystorys.com

outlook.com/signup

gderrrpololo.net
Attributes
  • build

    260212

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      c3a4ce9f2dd1721a3a25db6cbc0b5dd6.dll

    • Size

      467KB

    • MD5

      c3a4ce9f2dd1721a3a25db6cbc0b5dd6

    • SHA1

      413a02511ce445448f2b338be073330c018c72f7

    • SHA256

      2eeee8a83dcf0cbfff2dccaf4408c7ac17130d2ee06d31698d2b58e97e280f75

    • SHA512

      b28c5203779fe4a5538646b825e23b7fbefcdad832f9c3101e7109b3e491257426e4a45ccbdcf788baa8ffbb7fef3e254dd6a13806e8c3720002d1f207cdf12e

    Score
    10/10
    gozi_ifsb8899bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks