Overview

overview

10

Static

static

3

826e27ebe4...3a.dll

windows7-x64

10

826e27ebe4...3a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    826e27ebe4950a57b944757673b9a93a

  • Size

    481KB

  • Sample

    240130-pkwzcsffh7

  • MD5

    826e27ebe4950a57b944757673b9a93a

  • SHA1

    2fb95c18197d28fa2f06256320db4b277e126671

  • SHA256

    c45c6faa94764a703ef64098046ffbb24eebd81bc360f31f441b884a8cddae5f

  • SHA512

    07a6634a640336eee87b9592d5bc3255ab806c46a47c7155c75f0689a2c32184e74ea177741e5af2335f5e08fe8568eac2dcd0c8397d34302085c21f9d832b0a

  • SSDEEP

    6144:5V6cQ5JWuSGbFMmNMiYrA9JnAURrQS4e25BbUV7TXSwtiYRhicrBn25ywXCu16AB:5VGJHd5MKbfrme25BAvsYOJywyu8wXQ

Score
10/10
gozi8877bankerisfbtrojan

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

8877

C2

outlook.com

boyuleruner.online

coyuleruner.online
Attributes
  • base_path

    /tragli/

  • build

    250207

  • dga_season

    10

  • exe_type

    loader

  • extension

    .brw

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      826e27ebe4950a57b944757673b9a93a

    • Size

      481KB

    • MD5

      826e27ebe4950a57b944757673b9a93a

    • SHA1

      2fb95c18197d28fa2f06256320db4b277e126671

    • SHA256

      c45c6faa94764a703ef64098046ffbb24eebd81bc360f31f441b884a8cddae5f

    • SHA512

      07a6634a640336eee87b9592d5bc3255ab806c46a47c7155c75f0689a2c32184e74ea177741e5af2335f5e08fe8568eac2dcd0c8397d34302085c21f9d832b0a

    • SSDEEP

      6144:5V6cQ5JWuSGbFMmNMiYrA9JnAURrQS4e25BbUV7TXSwtiYRhicrBn25ywXCu16AB:5VGJHd5MKbfrme25BAvsYOJywyu8wXQ

    Score
    10/10
    gozi8877bankerisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks