General

  • Target
    a230000.dll
  • Size 227KB
  • Sample220808-mkyrvabff8
  • SHA256 8c37fb14f34e6633008e6ef4e3a37265c61c367783cb7f4a6666608011eeed3b
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 11111

C2
  • trackin1g-protection.cdnn.mozilla.net

  • 176.10.119.80

  • 194.76.224.245

  • 31.214.157.77

  • chnkdgpopupser.at

  • 185.158.250.220

  • 185.158.250.234

  • 194.76.224.181

Attributes
  • base_path

    /fonts/

  • exe_type

    worker

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target
      a230000.dll
    • Size 227KB
    • SHA256 8c37fb14f34e6633008e6ef4e3a37265c61c367783cb7f4a6666608011eeed3b
    • MD5 SHA1 SHA512
    Score
    1/10

MITRE ATT&CK Matrix

Tasks