Overview

overview

10

Static

static

10

0d6014f1d2...ed.dll

windows7-x64

1

0d6014f1d2...ed.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked

  • Size

    50KB

  • Sample

    221026-3w2wmsaah6

  • MD5

    48c862de90f908af7040248fcfb59b1e

  • SHA1

    cece2de01c06efcf1c3e8524cad3dbcbab7e102d

  • SHA256

    519bb9a2fef0ef4ec71449960dc44c80bf91745263d61ab72c2bf8ae0c732048

  • SHA512

    7622816c0048d2e152d06c2094cfc306ed03369d7967875d723c47de68e6b0f0c0957d3197c3575ea5dcbe283a68f80c5cfd7dd8eaa951a6041835974a82a7cb

  • SSDEEP

    1536:jiOtW7hqlalXHQc1cWIyHGyzVR7fsMH57k/q:OOtW7hqlalXnuyHl7fV57k

Score
10/10
gozi_ifsb1091

Malware Config

Extracted

Family

gozi_ifsb

Botnet

1091

C2

pop.project-ip.co.uk

Attributes
  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      0d6014f1d2487230c3bb38f31d2742577f84fd2f2e0d97be5fb9cf28b7ab6de9_unpacked

    • Size

      50KB

    • MD5

      48c862de90f908af7040248fcfb59b1e

    • SHA1

      cece2de01c06efcf1c3e8524cad3dbcbab7e102d

    • SHA256

      519bb9a2fef0ef4ec71449960dc44c80bf91745263d61ab72c2bf8ae0c732048

    • SHA512

      7622816c0048d2e152d06c2094cfc306ed03369d7967875d723c47de68e6b0f0c0957d3197c3575ea5dcbe283a68f80c5cfd7dd8eaa951a6041835974a82a7cb

    • SSDEEP

      1536:jiOtW7hqlalXHQc1cWIyHGyzVR7fsMH57k/q:OOtW7hqlalXnuyHl7fV57k

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks