Overview

overview

10

Static

static

1480777c36...e1.dll

windows7-x64

10

1480777c36...e1.dll

windows10-2004-x64

10

Resubmissions

27-10-2022 16:05

221027-tjzfbacfg5 10

20-10-2022 21:03

221020-zv75gsedhj 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1480777c361ac1d398cc26c90215de629733f66d60dcbd5970700db0ce786ae1.exe

  • Size

    973KB

  • Sample

    221027-tjzfbacfg5

  • MD5

    8c658b9b02814927124351484c42a272

  • SHA1

    85c346b2d6d0306a5bf7f276e82d9984c167e8ea

  • SHA256

    1480777c361ac1d398cc26c90215de629733f66d60dcbd5970700db0ce786ae1

  • SHA512

    28f9fcd72e5beceef4e7442e7bac02c0b5060c71403af34aabb78f4871c28bfdf88f4a50da8988fbbc07429466db6c05dd4f3292cabedf913ccbd532086deba3

  • SSDEEP

    12288:bDDjN50jO7rPxxYnCOWMrZlTf6ahp+3NV6ZZveATYAyvPzXTwnX1cQ47gcckpPWy:/vf3ZKnZDyYxr6AVIY7wOM058ZxM

Score
10/10
gozi202206061bankerldr4trojan

Malware Config

Extracted

Family

gozi

Botnet

202206061

C2

https://gigimas.xyz

https://reaso.xyz
Attributes
  • host_keep_time

    60

  • host_shift_time

    60

  • idle_time

    20

  • request_time

    10

aes.plain

Extracted

Family

gozi

Targets

    • Target

      1480777c361ac1d398cc26c90215de629733f66d60dcbd5970700db0ce786ae1.exe

    • Size

      973KB

    • MD5

      8c658b9b02814927124351484c42a272

    • SHA1

      85c346b2d6d0306a5bf7f276e82d9984c167e8ea

    • SHA256

      1480777c361ac1d398cc26c90215de629733f66d60dcbd5970700db0ce786ae1

    • SHA512

      28f9fcd72e5beceef4e7442e7bac02c0b5060c71403af34aabb78f4871c28bfdf88f4a50da8988fbbc07429466db6c05dd4f3292cabedf913ccbd532086deba3

    • SSDEEP

      12288:bDDjN50jO7rPxxYnCOWMrZlTf6ahp+3NV6ZZveATYAyvPzXTwnX1cQ47gcckpPWy:/vf3ZKnZDyYxr6AVIY7wOM058ZxM

    Score
    10/10
    gozi202206061bankerldr4trojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks