General

  • Target
    d2ef5.7z
  • Size 32KB
  • Sample221003-rljfrsagar
  • SHA256 b5c66177a6ae24e1d4c6e80d127cc09d400acd77f55a633972aefd28582c8d5f
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 10101

C2
  • trackingg-protectioon.cdn1.mozilla.net

  • 45.8.158.104

  • 188.127.224.114

  • weiqeqwns.com

  • wdeiqeqwns.com

  • weiqeqwens.com

  • weiqewqwns.com

  • iujdhsndjfks.com

Attributes
  • base_path

    /uploaded/

  • build

    250246

  • exe_type

    loader

  • extension

    .pct

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target
      d2ef5.exe
    • Size 37KB
    • SHA256 1056ea3dad265dd554362bc0bd67f08fa2b9f3e5839e6e4fb197831a15c8acef
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks