General

  • Target

    5bc6ddafe375c28e20da7b390f0275920b147ba5fb8374f649afa818dc498c7a

  • Size

    215KB

  • Sample

    220801-t797qaegbn

  • MD5

    0be302a483e4ff9a5c6e392e90897485

  • SHA1

    e645c0c2c626aea83396f805559a90c25fea20d4

  • SHA256

    5bc6ddafe375c28e20da7b390f0275920b147ba5fb8374f649afa818dc498c7a

  • SHA512

    479411fc80d3646d2b2f7a5e099d91aa3296ccd7da39f4c081362fb39f465dc8820e63d785186df2d8e601c3ac63cfa8f1d3d188d918deed3c66b9e8589121fe

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    214082

Extracted

Family

gozi_ifsb

Botnet

3401

C2

microsoft.com

update.microsoft.com

avast.com

tm90daron.club

jamericohermann.com

b9437ariane.com

Attributes
  • build

    214082

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      5bc6ddafe375c28e20da7b390f0275920b147ba5fb8374f649afa818dc498c7a

    • Size

      215KB

    • MD5

      0be302a483e4ff9a5c6e392e90897485

    • SHA1

      e645c0c2c626aea83396f805559a90c25fea20d4

    • SHA256

      5bc6ddafe375c28e20da7b390f0275920b147ba5fb8374f649afa818dc498c7a

    • SHA512

      479411fc80d3646d2b2f7a5e099d91aa3296ccd7da39f4c081362fb39f465dc8820e63d785186df2d8e601c3ac63cfa8f1d3d188d918deed3c66b9e8589121fe

MITRE ATT&CK Matrix

Tasks