General

  • Target

    readme

  • Size

    654KB

  • Sample

    220322-r8r2esgbg4

  • MD5

    5cc6ba143e3c3ad5ba978148d213e1ac

  • SHA1

    39d67ee1af666dd307049ac017bde0c75f9d120c

  • SHA256

    64eb761e7ec0ccfd080a70bd1c6a34de92a5e9aea591793ae08155a211ad3726

  • SHA512

    6742c064f7178be86e1d5e157d987445fbaa259c88043f4179f35d8ecba8d2d17765d9856985dfb6034bde4b0a3dbea1905d3be51587b974206fa6eaf6ddc38a

Malware Config

Extracted

Family

gozi_ifsb

Botnet

7626

C2

buredom.top

linkspremium.ru

premiumlists.ru

Attributes
  • base_path

    /drew/

  • build

    250225

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      readme

    • Size

      654KB

    • MD5

      5cc6ba143e3c3ad5ba978148d213e1ac

    • SHA1

      39d67ee1af666dd307049ac017bde0c75f9d120c

    • SHA256

      64eb761e7ec0ccfd080a70bd1c6a34de92a5e9aea591793ae08155a211ad3726

    • SHA512

      6742c064f7178be86e1d5e157d987445fbaa259c88043f4179f35d8ecba8d2d17765d9856985dfb6034bde4b0a3dbea1905d3be51587b974206fa6eaf6ddc38a

MITRE ATT&CK Matrix

Tasks