Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

a4e3b20552...78.dll

windows7_x64

1

a4e3b20552...78.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a4e3b205523d28cb8482729675d70e1cf88d81f0081825fecf86274b07ea1578

  • Size

    42KB

  • Sample

    220201-lj2lnscgh7

  • MD5

    8228ee6b537209f37b61def0fed70896

  • SHA1

    5eebb557b3597a55d0637b9facc64188ec302b42

  • SHA256

    a4e3b205523d28cb8482729675d70e1cf88d81f0081825fecf86274b07ea1578

  • SHA512

    adcc34a7f5676cabf3708f035c401ee48ba46fe3494036db9e2a74af84b273a260b0cc4f21b38f3ed4a0e849c5116fdaf6dd4a0f1003d028782ef9df343c9a77

Score
10/10
gozi_rm3210307bankerpersistencetrojan

Malware Config

Extracted

Family

gozi_rm3

Botnet

210307

C2

https://sonak.cyou

Attributes
  • build

    300960

  • exe_type

    loader

  • non_target_locale

    RU

  • server_id

    12

  • url_path

    index.htm

rsa_pubkey.plain
aes.plain

Targets

    • Target

      a4e3b205523d28cb8482729675d70e1cf88d81f0081825fecf86274b07ea1578

    • Size

      42KB

    • MD5

      8228ee6b537209f37b61def0fed70896

    • SHA1

      5eebb557b3597a55d0637b9facc64188ec302b42

    • SHA256

      a4e3b205523d28cb8482729675d70e1cf88d81f0081825fecf86274b07ea1578

    • SHA512

      adcc34a7f5676cabf3708f035c401ee48ba46fe3494036db9e2a74af84b273a260b0cc4f21b38f3ed4a0e849c5116fdaf6dd4a0f1003d028782ef9df343c9a77

    Score
    10/10
    gozi_rm3bankerpersistencetrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks