Overview

overview

10

Static

static

10

24d42de85e...39.dll

windows7_x64

3

24d42de85e...39.dll

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24d42de85e806faa4b15932960af88c7ec661733a6d8e27ebaed42d3bf5e1139

  • Size

    328KB

  • Sample

    220611-zvz4wacfd5

  • MD5

    c26ecd2dd4809ce4ef9d9d71a558f6c3

  • SHA1

    b950c4a39ab467f31b3bc64d4e0853a6baa73898

  • SHA256

    24d42de85e806faa4b15932960af88c7ec661733a6d8e27ebaed42d3bf5e1139

  • SHA512

    fb3ef2d0179dee327b8785ae743e8e0dcb92aad41b78b143c3a070292a7bea8efd5196cb3dfe7f333f59e16baef466a100f370e044cbaed77caccbc69838ef7b

Score
10/10
gozi_ifsb1100

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1100

C2

boombom.at/krp3cmg

hipohook.cn/krp3cmg

gumerhot.at/krp3cmg

voligon.cn/krp3cmg

joolpok.at/krp3cmg

nomopef.su/krp3cmg

xiloker.cn/krp3cmg

quihot.at/krp3cmg

joombok.su/krp3cmg

ribomoon.cn/krp3cmg

quartan.su/krp3cmg

chikoole.cn/krp3cmg
Attributes
  • build

    214845

  • exe_type

    worker

  • server_id

    110

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      24d42de85e806faa4b15932960af88c7ec661733a6d8e27ebaed42d3bf5e1139

    • Size

      328KB

    • MD5

      c26ecd2dd4809ce4ef9d9d71a558f6c3

    • SHA1

      b950c4a39ab467f31b3bc64d4e0853a6baa73898

    • SHA256

      24d42de85e806faa4b15932960af88c7ec661733a6d8e27ebaed42d3bf5e1139

    • SHA512

      fb3ef2d0179dee327b8785ae743e8e0dcb92aad41b78b143c3a070292a7bea8efd5196cb3dfe7f333f59e16baef466a100f370e044cbaed77caccbc69838ef7b

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks