Overview

overview

10

Static

static

6.dll

windows7_x64

10

6.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6.dll

  • Size

    138KB

  • Sample

    211130-phrxmaaad7

  • MD5

    e7b4153cc22f46f87835b6d59d6905e4

  • SHA1

    ca6f9879c802bf96697354b01c61e5a98b769275

  • SHA256

    67eaada8a12b536d407706e21e7f5b38ccc29d62e40dd66bbf2b2902df0169f0

  • SHA512

    e8e6de8e3ccdd5de96747938fea18294c428794a11e77b96a494be1e54c2641f26a995733e6e307eece9c7635c7b70a329527d01a86134ac1095b696c8a19012

Score
10/10
gozi_ifsb8899bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

8899

C2

microsoft.com/windowsdisabler

bvolebukoneh.site

karfaganda.com
Attributes
  • build

    260216

  • dga_season

    10

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      6.dll

    • Size

      138KB

    • MD5

      e7b4153cc22f46f87835b6d59d6905e4

    • SHA1

      ca6f9879c802bf96697354b01c61e5a98b769275

    • SHA256

      67eaada8a12b536d407706e21e7f5b38ccc29d62e40dd66bbf2b2902df0169f0

    • SHA512

      e8e6de8e3ccdd5de96747938fea18294c428794a11e77b96a494be1e54c2641f26a995733e6e307eece9c7635c7b70a329527d01a86134ac1095b696c8a19012

    Score
    10/10
    gozi_ifsb8899bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks