General

  • Target

    0f9a9637b23ab3565d0e24ec312e48954eedb867d22b7ec0fd6dd1ea20390714

  • Size

    766KB

  • Sample

    220822-h8jklscfck

  • MD5

    34206ffeae31355dd9810ca9508ee6cb

  • SHA1

    a140b4e7adc68e6247d7287cf8df8feee187d70c

  • SHA256

    0f9a9637b23ab3565d0e24ec312e48954eedb867d22b7ec0fd6dd1ea20390714

  • SHA512

    ef311a209bab92481a34aac51a0116629905a8cdb503ae5fc32fd092834bb284b69c26a4daaad56885ba8e00e9afa6a80ab41c542501af5308c0424e83cde6e6

  • SSDEEP

    12288:23F0q6XDm9InfLOq/cV9pjiSupBsAi9PZ/EWN70ofZVW6:233GDOIDPcVUsA4JEk70ofh

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2011

C2

skype.com

185.158.249.89

apn.msn.com

185.158.249.91

Attributes
  • base_path

    /fesum/

  • build

    250229

  • exe_type

    loader

  • extension

    .fsm

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      0f9a9637b23ab3565d0e24ec312e48954eedb867d22b7ec0fd6dd1ea20390714

    • Size

      766KB

    • MD5

      34206ffeae31355dd9810ca9508ee6cb

    • SHA1

      a140b4e7adc68e6247d7287cf8df8feee187d70c

    • SHA256

      0f9a9637b23ab3565d0e24ec312e48954eedb867d22b7ec0fd6dd1ea20390714

    • SHA512

      ef311a209bab92481a34aac51a0116629905a8cdb503ae5fc32fd092834bb284b69c26a4daaad56885ba8e00e9afa6a80ab41c542501af5308c0424e83cde6e6

    • SSDEEP

      12288:23F0q6XDm9InfLOq/cV9pjiSupBsAi9PZ/EWN70ofZVW6:233GDOIDPcVUsA4JEk70ofh

MITRE ATT&CK Matrix

Tasks