Overview

overview

10

Static

static

3ad271f0c2...39.exe

windows7_x64

10

3ad271f0c2...39.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39

  • Size

    273KB

  • Sample

    220703-xdhgdscdgq

  • MD5

    a818adf566140e69834a6d91d7e85cd8

  • SHA1

    022b36c5f2e9b98f46ee1bd6c39a06e817a16d50

  • SHA256

    3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39

  • SHA512

    6a189a79597433c722afe607cee064e60287c6b2c470e88c9a54932a9f12a3f7c57be0a9d3e69834df34368785ce3df131afedc8d8cd40fdd5a4024945c6df55

Score
10/10
gozi_ifsb3470bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3470

C2

google.com

gmail.com

zkeaganarlie.xyz

qwptke.club

dihtmkaden1.club
Attributes
  • build

    214085

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39

    • Size

      273KB

    • MD5

      a818adf566140e69834a6d91d7e85cd8

    • SHA1

      022b36c5f2e9b98f46ee1bd6c39a06e817a16d50

    • SHA256

      3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39

    • SHA512

      6a189a79597433c722afe607cee064e60287c6b2c470e88c9a54932a9f12a3f7c57be0a9d3e69834df34368785ce3df131afedc8d8cd40fdd5a4024945c6df55

    Score
    10/10
    gozi_ifsb3470bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks