General

  • Target
    eff0000.dll
  • Size 215KB
  • Sample220808-ml58bahdgp
  • SHA256 9045f11717ce012aa819655738febe6e9b3ed9ff154b8172a9d9abf2b267f771
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 8999

C2
  • arfv.skype.com

  • 185.189.151.34

  • 31.214.157.121

  • fakkktyirosc.at

Attributes
  • base_path

    /chupa/

  • exe_type

    worker

  • extension

    .upa

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target
      eff0000.dll
    • Size 215KB
    • SHA256 9045f11717ce012aa819655738febe6e9b3ed9ff154b8172a9d9abf2b267f771
    • MD5 SHA1 SHA512
    Score
    1/10

MITRE ATT&CK Matrix

Tasks