Resubmissions

09/03/2023, 23:30

230309-3hffgsce2z10

09/03/2023, 23:27

230309-3fp7xace2s1

General

  • Target
    https://dominiqueimmora.com/scarica/AgenziaEntrate.zip
  • Sample230309-3hffgsce2z

Malware Config

Extracted

Family
  • gozi

Extracted

Family
  • gozi

Botnet
  • 7712

C2
  • checklist.skype.com

  • 62.173.141.36

  • 31.41.44.85

  • 193.233.175.98

  • 46.8.210.110

  • 89.116.227.49

Attributes
  • base_path

    /drew/

  • build

    250255

  • exe_type

    loader

  • extension

    .jlk

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

MITRE ATT&CK Enterprise v6

Tasks