General

  • Target
    https://sherryanneinteriors.com/mise/Normativa.zip
  • Sample230308-b4rbbsdd74

Malware Config

Extracted

Family
  • gozi

Extracted

Family
  • gozi

Botnet
  • 7710

C2
  • checklist.skype.com

  • 62.173.140.103

  • 31.41.44.63

  • 46.8.19.239

  • 185.77.96.40

  • 46.8.19.116

  • 31.41.44.48

  • 62.173.139.11

  • 62.173.138.251

Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

MITRE ATT&CK Enterprise v6

Tasks