General

  • Target

    1e2f7950000.dll

  • Size

    231KB

  • Sample

    220308-qtjwtsfcb2

  • MD5

    b6fdd5b40d389b39e04d5f4fb8aa364d

  • SHA1

    61ab8667f1d7de2bc9f889e7cf52234eebe851b7

  • SHA256

    99acd04fc77abe7829c5fb51638d448efbeb7053aa62aa29412fbc3d1321d569

  • SHA512

    c582cfc90535f6d8514efbc161646f4f1e1728d63bf566d65567c475586b72239652352b90fdc28872817f3b6069fd7f282c0d9d36ac513f55bfaee07c18bc5d

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

20000

C2

skype.com/login

143.198.56.58

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .prv

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      1e2f7950000.dll

    • Size

      231KB

    • MD5

      b6fdd5b40d389b39e04d5f4fb8aa364d

    • SHA1

      61ab8667f1d7de2bc9f889e7cf52234eebe851b7

    • SHA256

      99acd04fc77abe7829c5fb51638d448efbeb7053aa62aa29412fbc3d1321d569

    • SHA512

      c582cfc90535f6d8514efbc161646f4f1e1728d63bf566d65567c475586b72239652352b90fdc28872817f3b6069fd7f282c0d9d36ac513f55bfaee07c18bc5d

    Score
    1/10

MITRE ATT&CK Matrix

Tasks