Overview

overview

10

Static

static

961e33ab89...50.exe

windows7-x64

10

961e33ab89...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    961e33ab89d862b29ab3cce94cb4bd82a21be446e78006a76036341f45789750

  • Size

    324KB

  • Sample

    220731-g7e1csceg5

  • MD5

    3d75280e783637c0b17f77cd6ebee543

  • SHA1

    7a96c8e5c3dbd9fa7e0942822b95c0b02b59f82d

  • SHA256

    961e33ab89d862b29ab3cce94cb4bd82a21be446e78006a76036341f45789750

  • SHA512

    a98f5bbd0953144fa0e6cbd56f957dd3c394247641e110a6bd706d2dd6f502a23e0cf22f20a20fbaa4beac293ff905ceb37e366a7290820104317b5239a84ea8

Score
10/10
gozi_ifsb3423bankertrojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214085

Extracted

Family

gozi_ifsb

Botnet

3423

C2

google.com

gmail.com

sizfjalenk51.com

v25brigittet.com

k23ueugeniay.com
Attributes
  • build

    214085

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      961e33ab89d862b29ab3cce94cb4bd82a21be446e78006a76036341f45789750

    • Size

      324KB

    • MD5

      3d75280e783637c0b17f77cd6ebee543

    • SHA1

      7a96c8e5c3dbd9fa7e0942822b95c0b02b59f82d

    • SHA256

      961e33ab89d862b29ab3cce94cb4bd82a21be446e78006a76036341f45789750

    • SHA512

      a98f5bbd0953144fa0e6cbd56f957dd3c394247641e110a6bd706d2dd6f502a23e0cf22f20a20fbaa4beac293ff905ceb37e366a7290820104317b5239a84ea8

    Score
    10/10
    gozi_ifsb3423bankertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks