Overview

overview

10

Static

static

3aa7c47f6a...4c.exe

windows7_x64

10

3aa7c47f6a...4c.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    106s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    25-06-2022 02:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3aa7c47f6add5ad2249b09b61808e1b1e4176372731f91950d81c7527b573f4c.exe

  • Size

    372KB

  • MD5

    bc7d3c26a0f5841473ed1f2a7f4295ec

  • SHA1

    029839d5a21d372e8247cec8ec456b751832c2bf

  • SHA256

    3aa7c47f6add5ad2249b09b61808e1b1e4176372731f91950d81c7527b573f4c

  • SHA512

    0566505cacbe2a1233e6c1d968dc1077439fcdfbc4290e0564ce8f841bd90d99466a0e49c9627fe0015d48db28d29c81f4a49a0970d39ec367c8991574ba4445

Score
10/10
gozi_ifsb3181bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214062

Extracted

Family

gozi_ifsb

Botnet

3181

C2

bm25yp.com

xiivhaaou.email

m264591jasen.city
Attributes
  • build

    214062

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\3aa7c47f6add5ad2249b09b61808e1b1e4176372731f91950d81c7527b573f4c.exe
    "C:\Users\Admin\AppData\Local\Temp\3aa7c47f6add5ad2249b09b61808e1b1e4176372731f91950d81c7527b573f4c.exe"
    1⤵
      PID:2560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2560-131-0x0000000000400000-0x000000000046D000-memory.dmp
      Filesize

      436KB

      Download
    • memory/2560-130-0x0000000000400000-0x000000000040F000-memory.dmp
      Filesize

      60KB

      Download
    • memory/2560-132-0x0000000002230000-0x000000000224B000-memory.dmp
      Filesize

      108KB

      Download