Overview

overview

10

Static

static

646591195c...85.exe

windows7_x64

10

646591195c...85.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    646591195ce08d9bcf0bdfb53fad9d6ca22a011d3eb6b525634ffe2eba909a85

  • Size

    574KB

  • Sample

    220701-fzffgsfdc2

  • MD5

    aab10c7658fdc14db2db8fe23341ade5

  • SHA1

    9bc148d4f2c238063706bd73b3f40001bf34e503

  • SHA256

    646591195ce08d9bcf0bdfb53fad9d6ca22a011d3eb6b525634ffe2eba909a85

  • SHA512

    88aa265c38264535e1dafa4057dbb1fd534f87f8cda689bd2efb79ff08e6d26519bb64da69262f96205803f2f424dfc50446b635289f04d352ff88b36afcac71

Score
10/10
gozi_ifsb3375bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214082

Extracted

Family

gozi_ifsb

Botnet

3375

C2

microsoft.com

update.microsoft.com

avast.com

viuecody.club

j63le.com

k6955lpya.info
Attributes
  • build

    214082

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      646591195ce08d9bcf0bdfb53fad9d6ca22a011d3eb6b525634ffe2eba909a85

    • Size

      574KB

    • MD5

      aab10c7658fdc14db2db8fe23341ade5

    • SHA1

      9bc148d4f2c238063706bd73b3f40001bf34e503

    • SHA256

      646591195ce08d9bcf0bdfb53fad9d6ca22a011d3eb6b525634ffe2eba909a85

    • SHA512

      88aa265c38264535e1dafa4057dbb1fd534f87f8cda689bd2efb79ff08e6d26519bb64da69262f96205803f2f424dfc50446b635289f04d352ff88b36afcac71

    Score
    10/10
    gozi_ifsb3375bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks