General

  • Target

    d2c0000.dll

  • Size

    256KB

  • Sample

    220329-pvm47sdhc7

  • MD5

    504cd296b179deb18a2d776cbbad53c4

  • SHA1

    4421a5d300681e56ec9e99fc2f63f36ab98597be

  • SHA256

    57caca34e3b88b43872e32534bccf5292b7c8f8b7569fcae8f49a20a422cf600

  • SHA512

    078bcbe11a4f8724e86b651fa41287c65d0357c2ef389ac77a73597a7822ccf261edf45574d2f5694ca733631e3ffe3f34409ee3d3a78fb964bdae1299f36b64

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

config.edge.skype.com

194.76.226.200

giporedtrip.at

habpfans.at

31.214.157.187

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      d2c0000.dll

    • Size

      256KB

    • MD5

      504cd296b179deb18a2d776cbbad53c4

    • SHA1

      4421a5d300681e56ec9e99fc2f63f36ab98597be

    • SHA256

      57caca34e3b88b43872e32534bccf5292b7c8f8b7569fcae8f49a20a422cf600

    • SHA512

      078bcbe11a4f8724e86b651fa41287c65d0357c2ef389ac77a73597a7822ccf261edf45574d2f5694ca733631e3ffe3f34409ee3d3a78fb964bdae1299f36b64

    Score
    1/10

MITRE ATT&CK Matrix

Tasks