General

  • Target

    2d060e2633da346052d5159ba2bc6779010f0bf641226ebdd5d217c02c6070fe

  • Size

    485KB

  • Sample

    220614-zlhhgacddq

  • MD5

    9b34b8041c4c1de5dd646cb7b2de472c

  • SHA1

    e5412440ef6256bb4cf56ad3c1ecec1962bbb516

  • SHA256

    2d060e2633da346052d5159ba2bc6779010f0bf641226ebdd5d217c02c6070fe

  • SHA512

    d332904a11bf9f71eb0eefb2b750432303dd253501cc114aa6d4e32d8899a889abe0e6427e49f354a6236cbaba1d7137dfd2b504b1723ffc883d92fd0c23fa06

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    215165

Extracted

Family

gozi_ifsb

Botnet

3140

C2

isatawatag.com

bosototsuy.com

atamekihok.com

Attributes
  • build

    215165

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      2d060e2633da346052d5159ba2bc6779010f0bf641226ebdd5d217c02c6070fe

    • Size

      485KB

    • MD5

      9b34b8041c4c1de5dd646cb7b2de472c

    • SHA1

      e5412440ef6256bb4cf56ad3c1ecec1962bbb516

    • SHA256

      2d060e2633da346052d5159ba2bc6779010f0bf641226ebdd5d217c02c6070fe

    • SHA512

      d332904a11bf9f71eb0eefb2b750432303dd253501cc114aa6d4e32d8899a889abe0e6427e49f354a6236cbaba1d7137dfd2b504b1723ffc883d92fd0c23fa06

MITRE ATT&CK Matrix

Tasks