General

  • Target

    a230000.dll

  • Size

    227KB

  • Sample

    220808-mkyrvabff8

  • MD5

    acfc928a4f14d0ae0f665e8b54c25d30

  • SHA1

    97dcaec9a6164a6b1e34ecd4898339f79de4dfbd

  • SHA256

    8c37fb14f34e6633008e6ef4e3a37265c61c367783cb7f4a6666608011eeed3b

  • SHA512

    e3627ca0e1147081cac4b4b2e33261b2b9c47feb05e5ecb19ad80dac7d6e60e0687c46f5f9d65571239ceb39daa63e188926d2d84633aff9302db32211e214c4

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

11111

C2

trackin1g-protection.cdnn.mozilla.net

176.10.119.80

194.76.224.245

31.214.157.77

chnkdgpopupser.at

185.158.250.220

185.158.250.234

194.76.224.181

Attributes
  • base_path

    /fonts/

  • exe_type

    worker

  • extension

    .bak

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      a230000.dll

    • Size

      227KB

    • MD5

      acfc928a4f14d0ae0f665e8b54c25d30

    • SHA1

      97dcaec9a6164a6b1e34ecd4898339f79de4dfbd

    • SHA256

      8c37fb14f34e6633008e6ef4e3a37265c61c367783cb7f4a6666608011eeed3b

    • SHA512

      e3627ca0e1147081cac4b4b2e33261b2b9c47feb05e5ecb19ad80dac7d6e60e0687c46f5f9d65571239ceb39daa63e188926d2d84633aff9302db32211e214c4

    Score
    1/10

MITRE ATT&CK Matrix

Tasks