General

  • Target

    4590000.dll

  • Size

    43KB

  • Sample

    220210-splkzahab3

  • MD5

    4e184f2cc95ec3aae2d6ce577d3b80ad

  • SHA1

    d5afb2aad85271c57aa09ad8f6e8ab207fcf0516

  • SHA256

    28a4d1a4952661364f6f61d18f815dc9cdc9747e8ae014c4ba035145af26f04c

  • SHA512

    7ef2830b02da10e9460a80c73057f3ca16605cd601ce48a1956e2db48a8f210b8849f30c49015353b8d72875da2d8ce6a022bfeff11755b85c411fc1987d3e7d

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

7613

C2

interlines.top

interlines.space

linkspremium.ru

premiumlists.ru

Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      4590000.dll

    • Size

      43KB

    • MD5

      4e184f2cc95ec3aae2d6ce577d3b80ad

    • SHA1

      d5afb2aad85271c57aa09ad8f6e8ab207fcf0516

    • SHA256

      28a4d1a4952661364f6f61d18f815dc9cdc9747e8ae014c4ba035145af26f04c

    • SHA512

      7ef2830b02da10e9460a80c73057f3ca16605cd601ce48a1956e2db48a8f210b8849f30c49015353b8d72875da2d8ce6a022bfeff11755b85c411fc1987d3e7d

    Score
    4/10

MITRE ATT&CK Matrix

Tasks