General

  • Target

    21cab000000.dll

  • Size

    215KB

  • Sample

    220811-qc774afecq

  • MD5

    8007d59551f6f0663c59f33170f60611

  • SHA1

    38c06af4722b3eadb026a06ce5983f14f92480f7

  • SHA256

    fc40aa7b2bf8bf5e94a07d2725cd47cd4b43c87665709b623eb418327abb5ebc

  • SHA512

    80a471ce703aebe0952dacf4a8301b0e5d6c514b583a46d07e7ffcfab9c466d192e0897f1b27bcfd90054da33d9a4039a9840c5be68c51e4ee972e0f6dc1e5b4

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

94.198.40.47

94.198.40.58

havefuntxmm.at

Attributes
  • base_path

    /images/

  • exe_type

    worker

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      21cab000000.dll

    • Size

      215KB

    • MD5

      8007d59551f6f0663c59f33170f60611

    • SHA1

      38c06af4722b3eadb026a06ce5983f14f92480f7

    • SHA256

      fc40aa7b2bf8bf5e94a07d2725cd47cd4b43c87665709b623eb418327abb5ebc

    • SHA512

      80a471ce703aebe0952dacf4a8301b0e5d6c514b583a46d07e7ffcfab9c466d192e0897f1b27bcfd90054da33d9a4039a9840c5be68c51e4ee972e0f6dc1e5b4

    Score
    1/10

MITRE ATT&CK Matrix

Tasks