Overview

overview

10

Static

static

3e471ade24...39.exe

windows7_x64

10

3e471ade24...39.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e471ade24273a6b6dff97917d85289f59f3ce48925a65ab367dfa0958327a39

  • Size

    376KB

  • Sample

    220701-jstw3saggn

  • MD5

    f697ec6610a8962f5d8913ad6a46cca5

  • SHA1

    699bde620200d914c329a5786af1968e1e0dda2b

  • SHA256

    3e471ade24273a6b6dff97917d85289f59f3ce48925a65ab367dfa0958327a39

  • SHA512

    7f84d13f4d8317b4822027c2f97e7104ee7610a8b943b489b51ea7b83c3ffbe275b015227d8cbb81186aca90816fbe6fb0226ccf94049bd4b91f06f8513fe3b6

Score
10/10
gozi_ifsb3195bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3195

C2

nsyblefgg.city

m25lni11528.com

dgrover.band
Attributes
  • build

    214062

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      3e471ade24273a6b6dff97917d85289f59f3ce48925a65ab367dfa0958327a39

    • Size

      376KB

    • MD5

      f697ec6610a8962f5d8913ad6a46cca5

    • SHA1

      699bde620200d914c329a5786af1968e1e0dda2b

    • SHA256

      3e471ade24273a6b6dff97917d85289f59f3ce48925a65ab367dfa0958327a39

    • SHA512

      7f84d13f4d8317b4822027c2f97e7104ee7610a8b943b489b51ea7b83c3ffbe275b015227d8cbb81186aca90816fbe6fb0226ccf94049bd4b91f06f8513fe3b6

    Score
    10/10
    gozi_ifsb3195bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks