General

  • Target

    d900000.dll

  • Size

    215KB

  • Sample

    220803-qmskdsbec8

  • MD5

    a285ba69ef3e60adfce0fe1df0bab034

  • SHA1

    168f1175be084ed3fe6c0362eddf405cef03d417

  • SHA256

    04f7ebb6a7380323e296eb86c1c328099ba11b935cd9394dec58bfac26854df0

  • SHA512

    52c005a01726a72b30814f989ad56ad8ee2b37f8c45f479de76248d30dc31a9bebe99079d8d25bf454eeb58ceb6d9cdf283e7ae662c26de8d09c63fa79471787

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

94.198.40.47

94.198.40.58

havefuntxmm.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      d900000.dll

    • Size

      215KB

    • MD5

      a285ba69ef3e60adfce0fe1df0bab034

    • SHA1

      168f1175be084ed3fe6c0362eddf405cef03d417

    • SHA256

      04f7ebb6a7380323e296eb86c1c328099ba11b935cd9394dec58bfac26854df0

    • SHA512

      52c005a01726a72b30814f989ad56ad8ee2b37f8c45f479de76248d30dc31a9bebe99079d8d25bf454eeb58ceb6d9cdf283e7ae662c26de8d09c63fa79471787

    Score
    1/10

MITRE ATT&CK Matrix

Tasks