Overview

overview

10

Static

static

3

2024-12-20...ia.exe

windows7-x64

10

2024-12-20...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-20_267d5a79fb93bde0016dd98d12710ea9_karagany_mafia

  • Size

    240KB

  • Sample

    241220-nwnxfsvqfv

  • MD5

    267d5a79fb93bde0016dd98d12710ea9

  • SHA1

    86d3c97fdb593c2eecb64f3c2903b4967c19c477

  • SHA256

    05935ee9760698045cb5837a94b2b7daa8d9c7597e79762d7b416934220e645a

  • SHA512

    4f9b17703e920ef34fde93592ec3ae29700ea48fcd233b82d94999cf9bd92416aeda7c4c6ac1d1fd3f15b65b5bf0449cface22a897de6dd6b718bf866a3542a6

  • SSDEEP

    6144:wApIgymzhBtzYvHpLhlxmTY2ErZqXW1PpbB2C:lpIg/tBtYvHpfxmTYRrZ+Wfo

Score
10/10
gozi3345bankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Attributes
  • build

    214082

Extracted

Family

gozi

Botnet

3345

C2

mjoan95bn.info

hsh55eyo77serenity.xyz

s5025bt.com
Attributes
  • build

    214082

  • dga_base_url

    constitution.org/usdeclar.txt

  • dga_crc

    0x4eb7d2ca

  • dga_season

    10

  • dga_tlds

    com

    ru

    org

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.plain
serpent.plain

Targets

    • Target

      2024-12-20_267d5a79fb93bde0016dd98d12710ea9_karagany_mafia

    • Size

      240KB

    • MD5

      267d5a79fb93bde0016dd98d12710ea9

    • SHA1

      86d3c97fdb593c2eecb64f3c2903b4967c19c477

    • SHA256

      05935ee9760698045cb5837a94b2b7daa8d9c7597e79762d7b416934220e645a

    • SHA512

      4f9b17703e920ef34fde93592ec3ae29700ea48fcd233b82d94999cf9bd92416aeda7c4c6ac1d1fd3f15b65b5bf0449cface22a897de6dd6b718bf866a3542a6

    • SSDEEP

      6144:wApIgymzhBtzYvHpLhlxmTY2ErZqXW1PpbB2C:lpIg/tBtYvHpfxmTYRrZ+Wfo

    Score
    10/10
    gozibankerisfbtrojan3345discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks