Overview

overview

10

Static

static

bca1f60d11...c9.exe

windows7_x64

10

bca1f60d11...c9.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    59s
  • max time network
    70s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    25-06-2022 04:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bca1f60d115f797a0234a94e8981a8fb5d74d94bb193661cdc94f9fb6cb888c9.exe

  • Size

    215KB

  • MD5

    1287ed32e22472ff98d78c7687fe3389

  • SHA1

    be8bf040099b4d037cdc6d7e01a4e08e4570276e

  • SHA256

    bca1f60d115f797a0234a94e8981a8fb5d74d94bb193661cdc94f9fb6cb888c9

  • SHA512

    565c6b04ad6a04d4f9b61b592bfe53a23cf7c686e7a2b5a4c4c0fe91e694df2fb0b57f9acbb4a586b89685dbda8aaec76bcdc1cfc786864c97b745c4e86fa75a

Score
10/10
gozi_ifsb3153bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    215165

Extracted

Family

gozi_ifsb

Botnet

3153

C2

biesbetiop.com

kircherche.com

toforemedi.com
Attributes
  • build

    215165

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\bca1f60d115f797a0234a94e8981a8fb5d74d94bb193661cdc94f9fb6cb888c9.exe
    "C:\Users\Admin\AppData\Local\Temp\bca1f60d115f797a0234a94e8981a8fb5d74d94bb193661cdc94f9fb6cb888c9.exe"
    1⤵
      PID:1424

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1424-132-0x0000000000400000-0x0000000000441000-memory.dmp
      Filesize

      260KB

      Download
    • memory/1424-131-0x0000000000400000-0x000000000040F000-memory.dmp
      Filesize

      60KB

      Download
    • memory/1424-133-0x00000000021E0000-0x00000000021FB000-memory.dmp
      Filesize

      108KB

      Download