Overview

overview

10

Static

static

10

364c784007...56.dll

windows10-2004-x64

3

364c784007...56.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    364c7840077bf1d8059059d2a60fae610cadc5fc5599c398e67e723363d44d56.bin
  • Size 43KB
  • Sample260729-ndsspavtaz
  • SHA256 364c7840077bf1d8059059d2a60fae610cadc5fc5599c398e67e723363d44d56
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
gozi5000bankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

  • gozi

Botnet

  • 5000

C2

  • detectportall.firefox.com

  • 193.242.211.133

  • 185.158.249.215

  • 185.189.151.102

  • 185.219.221.39

  • 194.76.225.96

  • 185.189.151.35

  • 31.214.157.121

  • 185.189.151.34

Attributes
  • base_path

    /archieves/

  • build

    250240

  • exe_type

    loader

  • extension

    .bor

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target
      364c7840077bf1d8059059d2a60fae610cadc5fc5599c398e67e723363d44d56.bin
    • Size 43KB
    • SHA256 364c7840077bf1d8059059d2a60fae610cadc5fc5599c398e67e723363d44d56
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks