Overview

overview

10

Static

static

3c715a2541...df.exe

windows7_x64

10

3c715a2541...df.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c715a2541eccac53f39a9eddc3bb562a12734293fb46cfbae99d27f7a8f33df

  • Size

    270KB

  • Sample

    220703-jan8wacea5

  • MD5

    5d9ae4e42abe5ba1fc90b6d905c1f14b

  • SHA1

    82f9a681a9a4fc344657a0a93dd74295949c4eec

  • SHA256

    3c715a2541eccac53f39a9eddc3bb562a12734293fb46cfbae99d27f7a8f33df

  • SHA512

    cd49a9bfe3d4e478401f7e231f3339fb4a139a1f90a47f97729fbff2cda76583876b27055849d2d7565d13404da2e912704e54cbb8eedc38a2d72808d65175f6

Score
10/10
gozi_ifsb3420bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214085

Extracted

Family

gozi_ifsb

Botnet

3420

C2

google.com

gmail.com

goarebecao.club

gjoannemajor.com

bsamnz.com
Attributes
  • build

    214085

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      3c715a2541eccac53f39a9eddc3bb562a12734293fb46cfbae99d27f7a8f33df

    • Size

      270KB

    • MD5

      5d9ae4e42abe5ba1fc90b6d905c1f14b

    • SHA1

      82f9a681a9a4fc344657a0a93dd74295949c4eec

    • SHA256

      3c715a2541eccac53f39a9eddc3bb562a12734293fb46cfbae99d27f7a8f33df

    • SHA512

      cd49a9bfe3d4e478401f7e231f3339fb4a139a1f90a47f97729fbff2cda76583876b27055849d2d7565d13404da2e912704e54cbb8eedc38a2d72808d65175f6

    Score
    10/10
    gozi_ifsb3420bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks