Overview

overview

10

Static

static

3

9b40d3ed02...4a.dll

windows7-x64

10

9b40d3ed02...4a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b40d3ed02b3662db4e286a7d09f134a

  • Size

    520KB

  • Sample

    240214-kwyj4sfd28

  • MD5

    9b40d3ed02b3662db4e286a7d09f134a

  • SHA1

    1787247bfdce33a4a0126b167317ee814a165c4d

  • SHA256

    d43cfc2d0658951ce6118d1c851abe9bc4cad91b4e5732fad998cb53e034d858

  • SHA512

    3c17e3cdd6f294b3deedb0d1b8f8302fe6e346ca7285361eabc26168fe030056143246e35a484e1d7956a1f424bcdea8be3bb9163044ecc71ac013a4ad55c85f

  • SSDEEP

    12288:0/1dF5oiiOpCp1wwMnJiLHD/4M1kPD7KrY4Zk1Af0fSlllll/lllllj1OrvhcGX:0/h5aOwIgHcR7P4m1AESlllll/lllll0

Score
10/10
gozi1500bankerisfbtrojan

Malware Config

Extracted

Family

gozi

Extracted

Family

gozi

Botnet

1500

C2

gtr.antoinfer.com

app.bighomegl.at
Attributes
  • build

    250211

  • exe_type

    loader

  • server_id

    580

rsa_pubkey.plain
aes.plain

Targets

    • Target

      9b40d3ed02b3662db4e286a7d09f134a

    • Size

      520KB

    • MD5

      9b40d3ed02b3662db4e286a7d09f134a

    • SHA1

      1787247bfdce33a4a0126b167317ee814a165c4d

    • SHA256

      d43cfc2d0658951ce6118d1c851abe9bc4cad91b4e5732fad998cb53e034d858

    • SHA512

      3c17e3cdd6f294b3deedb0d1b8f8302fe6e346ca7285361eabc26168fe030056143246e35a484e1d7956a1f424bcdea8be3bb9163044ecc71ac013a4ad55c85f

    • SSDEEP

      12288:0/1dF5oiiOpCp1wwMnJiLHD/4M1kPD7KrY4Zk1Af0fSlllll/lllllj1OrvhcGX:0/h5aOwIgHcR7P4m1AESlllll/lllll0

    Score
    10/10
    gozi1500bankerisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks