Overview

overview

10

Static

static

43c7e63acd...6f.exe

windows7_x64

10

43c7e63acd...6f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43c7e63acdf4f67906d4f615b25a141bc35dd588176fff717b57af941bec176f

  • Size

    376KB

  • Sample

    220707-1nwnjsfca4

  • MD5

    6ad7e367f0b2b43900a0b762786e68ba

  • SHA1

    c78f8fde40312fef8c2c0b91e35677c24f3d9145

  • SHA256

    43c7e63acdf4f67906d4f615b25a141bc35dd588176fff717b57af941bec176f

  • SHA512

    8169777939e1f59642000d6d46ef598f38e30567046daa70708848028427c0b480eab1b156e7b27924a5ffe72199119e91d55c4e6e01362ae20dbb3c932abf2e

Score
10/10
gozi_ifsb3195bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3195

C2

nsyblefgg.city

m25lni11528.com

dgrover.band
Attributes
  • build

    214062

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      43c7e63acdf4f67906d4f615b25a141bc35dd588176fff717b57af941bec176f

    • Size

      376KB

    • MD5

      6ad7e367f0b2b43900a0b762786e68ba

    • SHA1

      c78f8fde40312fef8c2c0b91e35677c24f3d9145

    • SHA256

      43c7e63acdf4f67906d4f615b25a141bc35dd588176fff717b57af941bec176f

    • SHA512

      8169777939e1f59642000d6d46ef598f38e30567046daa70708848028427c0b480eab1b156e7b27924a5ffe72199119e91d55c4e6e01362ae20dbb3c932abf2e

    Score
    10/10
    gozi_ifsb3195bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks