General

  • Target

    cadb1eee7384345e0b027f1fdac079cc34f23cf48052a7c858a0cb6644b636ae

  • Size

    250KB

  • Sample

    220524-r7hflaafel

  • MD5

    59b7e63f87329d52cf74e10f148cde0b

  • SHA1

    be354ec7ab8b33061a2fa8f0b8d84274376dd22d

  • SHA256

    cadb1eee7384345e0b027f1fdac079cc34f23cf48052a7c858a0cb6644b636ae

  • SHA512

    7e8d976177965048fb39e09f7bec7ba75ca3c7f6559d62e59d1f28ee36683be010c53b59d5e9183f663dc03f43748c0dbc78121a24e60abd12aaecb4b4f473b7

Malware Config

Extracted

Family

gozi_rm3

Attributes
  • build

    300904

Extracted

Family

gozi_rm3

Botnet

90420251

C2

https://vvietnamnews.xyz

Attributes
  • build

    300904

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • non_target_locale

    RU

  • server_id

    12

  • url_path

    index.htm

rsa_pubkey.plain
1
-----BEGIN PUBLIC KEY-----
2
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMfrZxSj1u9SykJZnbZ/IcVu4P
3
/F2O54wLUaBo9zQo7c9dQ0fHxGBDuJ/K3FOvg0v3HqOWjIIWCebmYAYdv/TTvV4R
4
i3+iA8m2peLQXjqJe9wu2830oJ3oSEtnJ9KkS5MwVEYwbIVUFIC4mzHyFNZVm6g1
5
HJDP+x2p9omoOavD5wIDAQAB
6
-----END PUBLIC KEY-----
serpent.plain
1
iOHRppWovAJuIiDz

Targets

    • Target

      cadb1eee7384345e0b027f1fdac079cc34f23cf48052a7c858a0cb6644b636ae

    • Size

      250KB

    • MD5

      59b7e63f87329d52cf74e10f148cde0b

    • SHA1

      be354ec7ab8b33061a2fa8f0b8d84274376dd22d

    • SHA256

      cadb1eee7384345e0b027f1fdac079cc34f23cf48052a7c858a0cb6644b636ae

    • SHA512

      7e8d976177965048fb39e09f7bec7ba75ca3c7f6559d62e59d1f28ee36683be010c53b59d5e9183f663dc03f43748c0dbc78121a24e60abd12aaecb4b4f473b7

MITRE ATT&CK Enterprise v6

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.