Overview

overview

10

Static

static

3de1e75e4d...86.exe

windows7_x64

10

3de1e75e4d...86.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    81s
  • max time network
    79s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    01-07-2022 14:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3de1e75e4d0e7d9286469400f595991acbd27b8ce63bc0207a5da2789326b486.exe

  • Size

    459KB

  • MD5

    6793379ad55ab599765eee2e4ce13ce4

  • SHA1

    78dfebd3df7175f44634b48e77272c89673ae30c

  • SHA256

    3de1e75e4d0e7d9286469400f595991acbd27b8ce63bc0207a5da2789326b486

  • SHA512

    6ef84ffed9c513ecd99a0ef6869c418237abc680a70174116baa49cf69816fafba42f9523825b9678b0a18e8f0f6940969915aaee4cc2e0f1a52a589b338c214

Score
10/10
gozi_ifsb3428bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214085

Extracted

Family

gozi_ifsb

Botnet

3428

C2

google.com

gmail.com

ztoy.top

qmiller.club

vipresleynz.com
Attributes
  • build

    214085

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\3de1e75e4d0e7d9286469400f595991acbd27b8ce63bc0207a5da2789326b486.exe
    "C:\Users\Admin\AppData\Local\Temp\3de1e75e4d0e7d9286469400f595991acbd27b8ce63bc0207a5da2789326b486.exe"
    1⤵
      PID:3456

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3456-130-0x0000000000400000-0x000000000040E000-memory.dmp
      Filesize

      56KB

      Download
    • memory/3456-131-0x0000000000400000-0x0000000000485000-memory.dmp
      Filesize

      532KB

      Download
    • memory/3456-132-0x00000000004E0000-0x00000000004EF000-memory.dmp
      Filesize

      60KB

      Download