Overview

overview

10

Static

static

10

51b0000.dll

windows7-x64

1

51b0000.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51b0000.dll.exe

  • Size

    227KB

  • Sample

    220922-rt5nzafdgr

  • MD5

    feb09e0eb2b4cc5fefbf9220557ef9b4

  • SHA1

    f98d2b8a622891acc9c2a40115d4c2357e95ca1f

  • SHA256

    e1885b84829f448f9d549144ea8221f422a9243a4693101a145c0836cc13fac1

  • SHA512

    ceb19f723b2afae856f17838d3a09008e9e922ae78efaaf63f16f8391238024073b270be3e4872349c31a0fac314c1a152f3b2a77c149429d7269b7562b6badf

  • SSDEEP

    3072:UlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAlw5VgCK5hcjFwxJFocW:UlDosEPR66q9KgylInd6oqAlD5dnFoc

Score
10/10
gozi_ifsb10103

Malware Config

Extracted

Family

gozi_ifsb

Botnet

10103

C2

trackingg-protectioon.cdn1.mozilla.net

45.8.158.104

188.127.224.114

weiqeqwns.com

wdeiqeqwns.com

weiqeqwens.com

weiqewqwns.com

iujdhsndjfks.com
Attributes
  • base_path

    /uploaded/

  • exe_type

    worker

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      51b0000.dll.exe

    • Size

      227KB

    • MD5

      feb09e0eb2b4cc5fefbf9220557ef9b4

    • SHA1

      f98d2b8a622891acc9c2a40115d4c2357e95ca1f

    • SHA256

      e1885b84829f448f9d549144ea8221f422a9243a4693101a145c0836cc13fac1

    • SHA512

      ceb19f723b2afae856f17838d3a09008e9e922ae78efaaf63f16f8391238024073b270be3e4872349c31a0fac314c1a152f3b2a77c149429d7269b7562b6badf

    • SSDEEP

      3072:UlfGqwJTeTEom3lIkR2SCD6q9KgyItk78mV0dfgxT/cqAlw5VgCK5hcjFwxJFocW:UlDosEPR66q9KgylInd6oqAlD5dnFoc

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks