Resubmissions

27/10/2022, 16:06

221027-tj9w2scfg810

25/08/2022, 03:54

220825-egalvagbb91

General

  • Target
    utdh1.dll
  • Size 760KB
  • Sample221027-tj9w2scfg8
  • SHA256 2502a3f8c9a6a8681f9222e93b14e077bf879e3009571c646ee94275bc994d01
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • gozi

Botnet
  • 202206061

C2
  • https://daydayvin.xyz

  • https://gigiman.xyz

Attributes
  • host_keep_time

    2

  • host_shift_time

    1

  • idle_time

    1

  • request_time

    10

aes.plain

Targets

    • Target
      utdh1.dll
    • Size 760KB
    • SHA256 2502a3f8c9a6a8681f9222e93b14e077bf879e3009571c646ee94275bc994d01
    • MD5 SHA1 SHA512 SSDEEP
    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Matrix

Tasks