General

  • Target

    2d28cd15524d17d0d923a21e8f83dadfc623c8cc37a1bf66fafe5e844df6da04

  • Size

    376KB

  • Sample

    220614-y48a6sffc6

  • MD5

    c3286225410718dac97ef47b3697955b

  • SHA1

    07373bf014acb71d77d3ece614bd907a382fb634

  • SHA256

    2d28cd15524d17d0d923a21e8f83dadfc623c8cc37a1bf66fafe5e844df6da04

  • SHA512

    4e41939b86161a55b05e64f955a16b71df99e3efa6c8b9d20f650b02d3d87eb73758267c7b6a6775f64b4b99825a3c184075ece6ee063353bd7f03c01c9dcb30

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3195

C2

nsyblefgg.city

m25lni11528.com

dgrover.band

Attributes
  • build

    214062

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      2d28cd15524d17d0d923a21e8f83dadfc623c8cc37a1bf66fafe5e844df6da04

    • Size

      376KB

    • MD5

      c3286225410718dac97ef47b3697955b

    • SHA1

      07373bf014acb71d77d3ece614bd907a382fb634

    • SHA256

      2d28cd15524d17d0d923a21e8f83dadfc623c8cc37a1bf66fafe5e844df6da04

    • SHA512

      4e41939b86161a55b05e64f955a16b71df99e3efa6c8b9d20f650b02d3d87eb73758267c7b6a6775f64b4b99825a3c184075ece6ee063353bd7f03c01c9dcb30

MITRE ATT&CK Matrix

Tasks