Overview

overview

10

Static

static

10

10000000.dll

windows7-x64

1

10000000.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10000000.dll

  • Size

    39KB

  • Sample

    221006-mdm2rshaf4

  • MD5

    624c0f25a78a671b38deae200552f636

  • SHA1

    ff124be95fe93183cf7e140139763b2ad2126367

  • SHA256

    ed2335f95a1cb6f627f10be64a260b7f6b07a5d9bd5e061136ea1e5110029b85

  • SHA512

    455001678e7de3196f3af487de56bbfd5ba96af0165bce1a8e42f94cc811ee8c10952422ebd139dbdefe96d6d511fe6aaf99214ee1b919c5d40c3836cd2bdc0c

  • SSDEEP

    768:A2QGmsx3R69vovEyRmq63goMWPXE2bE/JVMq2LATqeeAeOu2D2wqmLiuuyiO:qGBx3R6LAmqlaPGhVMq2LpeReOb2Pmpy

Score
10/10
gozi_ifsb3000

Malware Config

Extracted

Family

gozi_ifsb

Botnet

3000

C2

config.edge.skype.com

89.41.26.99

89.45.4.102

interstarts.top

superlist.top

internetcoca.in
Attributes
  • base_path

    /drew/

  • build

    250246

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target

      10000000.dll

    • Size

      39KB

    • MD5

      624c0f25a78a671b38deae200552f636

    • SHA1

      ff124be95fe93183cf7e140139763b2ad2126367

    • SHA256

      ed2335f95a1cb6f627f10be64a260b7f6b07a5d9bd5e061136ea1e5110029b85

    • SHA512

      455001678e7de3196f3af487de56bbfd5ba96af0165bce1a8e42f94cc811ee8c10952422ebd139dbdefe96d6d511fe6aaf99214ee1b919c5d40c3836cd2bdc0c

    • SSDEEP

      768:A2QGmsx3R69vovEyRmq63goMWPXE2bE/JVMq2LATqeeAeOu2D2wqmLiuuyiO:qGBx3R6LAmqlaPGhVMq2LpeReOb2Pmpy

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks