Overview

overview

10

Static

static

10

168cf1d0000.dll

windows7-x64

1

168cf1d0000.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    168cf1d0000.dll.exe

  • Size

    227KB

  • Sample

    220920-qc8hvsgedr

  • MD5

    2ca25dca1f3b324e079f47ad66622852

  • SHA1

    91a3ab4a30508943449f118112ad81502d1f2122

  • SHA256

    70d282f2993db80c89217a279074bfed88394caca6a2cf88f558e8674a2ace5f

  • SHA512

    4e05bb55e06186bdff9379acc2907bf898f3034172903943ec9e4ea0c2203fa2460a839bd8a05dc46fea44609d04196396ac9783ee672a875a0fc1d0adbfab4b

  • SSDEEP

    6144:dlDosEPR66q9KgylInd6oqAHhD5VnFoc:HUPR6D9KDInd6oqABrF

Score
10/10
gozi_ifsb10101

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10101

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com
Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      168cf1d0000.dll.exe

    • Size

      227KB

    • MD5

      2ca25dca1f3b324e079f47ad66622852

    • SHA1

      91a3ab4a30508943449f118112ad81502d1f2122

    • SHA256

      70d282f2993db80c89217a279074bfed88394caca6a2cf88f558e8674a2ace5f

    • SHA512

      4e05bb55e06186bdff9379acc2907bf898f3034172903943ec9e4ea0c2203fa2460a839bd8a05dc46fea44609d04196396ac9783ee672a875a0fc1d0adbfab4b

    • SSDEEP

      6144:dlDosEPR66q9KgylInd6oqAHhD5VnFoc:HUPR6D9KDInd6oqABrF

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks