Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0d6014f1d2...64.dll

windows7-x64

1

0d6014f1d2...64.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked_x64

  • Size

    61KB

  • Sample

    221026-3w27eaaah7

  • MD5

    3d9c14da641e84cff4d9cffd8330537e

  • SHA1

    24573ffeee7a7ee39699cb4f16316446425df43b

  • SHA256

    10efad7959482d08892d7e72acc341f5970c04dc5504d2fd48d02b5a0290fb1b

  • SHA512

    2cc5e82fda3cbfde6f1dd7fc37765759ea2e1e403580cbcec7d59815eace718b7b6c55c4635c5c6c70d402423ca38e13f3c3ea34b9b71fba3ebe49ae26be8c99

  • SSDEEP

    1536:Ar1AFUn6gevPncssmevqrHEZFose6N9w2rL:AJAFUn6gIpepFose6N9w

Score
10/10
gozi_ifsb1091

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1091

C2

pop.project-ip.co.uk

Attributes
  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked_x64

    • Size

      61KB

    • MD5

      3d9c14da641e84cff4d9cffd8330537e

    • SHA1

      24573ffeee7a7ee39699cb4f16316446425df43b

    • SHA256

      10efad7959482d08892d7e72acc341f5970c04dc5504d2fd48d02b5a0290fb1b

    • SHA512

      2cc5e82fda3cbfde6f1dd7fc37765759ea2e1e403580cbcec7d59815eace718b7b6c55c4635c5c6c70d402423ca38e13f3c3ea34b9b71fba3ebe49ae26be8c99

    • SSDEEP

      1536:Ar1AFUn6gevPncssmevqrHEZFose6N9w2rL:AJAFUn6gIpepFose6N9w

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks