General
-
Target
6.bin
-
Size
119KB
-
Sample
211209-wj5nfaeedr
-
MD5
9ed64dfc08c0f369e5543ef133a22fb2
-
SHA1
5732a16dffde291d8125120477133ee36cfd93e4
-
SHA256
b82a1d06e5650808ae0b9ef1a77cc6047ca0601b13a9afa8cded17a93e27cda9
-
SHA512
e2fe5b228a0623bd32953b183f1dac74ee5c016ded7686b167d2054c53cffbd2e0c3dc4ef5e2cf0e802e4565c17c3ab2cd06eaf27f24605011bad206472c8643
Static task
static1
Behavioral task
behavioral1
Sample
6.bin.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
6.bin.dll
Resource
win10-en-20211208
Malware Config
Extracted
gozi_ifsb
8899
microsoft.com/windowsdisabler
https://technoshoper.com
https://avolebukoneh.website
http://technoshoper.com
http://avolebukoneh.website
-
base_path
/glik/
-
build
260216
-
dga_season
10
-
exe_type
loader
-
extension
.lwe
-
server_id
12
Targets
-
-
Target
6.bin
-
Size
119KB
-
MD5
9ed64dfc08c0f369e5543ef133a22fb2
-
SHA1
5732a16dffde291d8125120477133ee36cfd93e4
-
SHA256
b82a1d06e5650808ae0b9ef1a77cc6047ca0601b13a9afa8cded17a93e27cda9
-
SHA512
e2fe5b228a0623bd32953b183f1dac74ee5c016ded7686b167d2054c53cffbd2e0c3dc4ef5e2cf0e802e4565c17c3ab2cd06eaf27f24605011bad206472c8643
-
suricata: ET MALWARE Ursnif Variant CnC Beacon - URI Struct M1 (_2B)
suricata: ET MALWARE Ursnif Variant CnC Beacon - URI Struct M1 (_2B)
-
suricata: ET MALWARE Ursnif Variant CnC Beacon - URI Struct M2 (_2F)
suricata: ET MALWARE Ursnif Variant CnC Beacon - URI Struct M2 (_2F)
-