Overview

overview

10

Static

static

10

25bdab9cf1...00.dll

windows7-x64

1

25bdab9cf1...00.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25bdab9cf1c2dbb6e96e1b0797a4facaa0c3469164f1653328e4357fb421e061_dump_0x032E0000

  • Size

    292KB

  • Sample

    221027-abyn9sabb7

  • MD5

    e62516c6b9eddf76a31d42ded79fca1b

  • SHA1

    fbaa8fbb39d2ffd8d50c53ef5d1ee1a9be1aa2d5

  • SHA256

    b94230145638440e89d1bf9e10d3f7dddae17bea673de5cdffd6ff65d38fe669

  • SHA512

    ff6b321129b761094a2f955eb81c8b768b472d027d3797123152ee86d2d0b297d3f419de2351e70f3921ffa6d1711bed03bcf09ace4ef9d78831313992e3ff7e

  • SSDEEP

    6144:UCGyYNuNF9Sz3QSHFg9O7VTSo5ru4d++Njdqlalwcw9QzgF4:qtkbMbFh52htIjdqglwcw9hq

Score
10/10
gozi_ifsb2002

Malware Config

Extracted

Family

gozi_ifsb

Botnet

2002

C2

test1.ru

Attributes
  • dga_base_url

    opensource.apple.com/source/Security/Security-29/SecureTransport/LICENSE.txt?txt

  • dga_crc

    0x6f0b167a

  • exe_type

    worker

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      25bdab9cf1c2dbb6e96e1b0797a4facaa0c3469164f1653328e4357fb421e061_dump_0x032E0000

    • Size

      292KB

    • MD5

      e62516c6b9eddf76a31d42ded79fca1b

    • SHA1

      fbaa8fbb39d2ffd8d50c53ef5d1ee1a9be1aa2d5

    • SHA256

      b94230145638440e89d1bf9e10d3f7dddae17bea673de5cdffd6ff65d38fe669

    • SHA512

      ff6b321129b761094a2f955eb81c8b768b472d027d3797123152ee86d2d0b297d3f419de2351e70f3921ffa6d1711bed03bcf09ace4ef9d78831313992e3ff7e

    • SSDEEP

      6144:UCGyYNuNF9Sz3QSHFg9O7VTSo5ru4d++Njdqlalwcw9QzgF4:qtkbMbFh52htIjdqglwcw9hq

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks