General

  • Target

    a230000.dll

  • Size

    227KB

  • Sample

    220804-shavwsgbg3

  • MD5

    ee79ba8f5e0de27d4f6c8eaacfb26bb6

  • SHA1

    f8a190b628b8d42555afddd1fb79f91adac9c712

  • SHA256

    3d05e3f5f662ef39b92dfc1dc6344a400d109bcc6d55c6f7182983f6d1a72541

  • SHA512

    9cb80adcb6d0f76fdfea6f05718e2124d86e22ee75519e4bef637adb2edf599a0b654ae7ec30f689e233cc60294fd9e9b809490c74696e0a26ff70b35283b6c7

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

11111

C2

trackin1g-protection.cdnn.mozilla.net

176.10.119.80

194.76.224.245

31.214.157.77

chnkdgpopupser.at

185.158.250.220

185.158.250.234

194.76.224.181

Attributes
  • base_path

    /fonts/

  • exe_type

    worker

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      a230000.dll

    • Size

      227KB

    • MD5

      ee79ba8f5e0de27d4f6c8eaacfb26bb6

    • SHA1

      f8a190b628b8d42555afddd1fb79f91adac9c712

    • SHA256

      3d05e3f5f662ef39b92dfc1dc6344a400d109bcc6d55c6f7182983f6d1a72541

    • SHA512

      9cb80adcb6d0f76fdfea6f05718e2124d86e22ee75519e4bef637adb2edf599a0b654ae7ec30f689e233cc60294fd9e9b809490c74696e0a26ff70b35283b6c7

    Score
    1/10

MITRE ATT&CK Matrix

Tasks