General

  • Target

    2032-56-0x0000000000400000-0x0000000000462000-memory.dmp

  • Size

    392KB

  • Sample

    220803-gcd5ksfeh6

  • MD5

    30e75d834be13d06ee2aedc3044cda72

  • SHA1

    7d001d6e6b503c3027525eb79d7d4a8d8e874f81

  • SHA256

    cf75ee731e4364e923d2f769563712a17d3ef75b1e4cbbd71bc1098800412ec6

  • SHA512

    713069c2e1f7c0a7df2fa77684cb44951d250e4789e9e922c9c69fb1265c7f2fede187a7f78f9917133b40f8f5bcc8245b062612e5e46932dcaff5a5f0fc23d9

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

99999

C2

trackingg-protectioon.cdn1.mozilla.net

194.76.225.168

194.76.224.242

Attributes
  • base_path

    /fonts/

  • build

    250240

  • exe_type

    loader

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      2032-56-0x0000000000400000-0x0000000000462000-memory.dmp

    • Size

      392KB

    • MD5

      30e75d834be13d06ee2aedc3044cda72

    • SHA1

      7d001d6e6b503c3027525eb79d7d4a8d8e874f81

    • SHA256

      cf75ee731e4364e923d2f769563712a17d3ef75b1e4cbbd71bc1098800412ec6

    • SHA512

      713069c2e1f7c0a7df2fa77684cb44951d250e4789e9e922c9c69fb1265c7f2fede187a7f78f9917133b40f8f5bcc8245b062612e5e46932dcaff5a5f0fc23d9

    Score
    3/10

MITRE ATT&CK Matrix

Tasks