General

  • Target
    deli.png.dll
  • Size 264KB
  • Sample210302-bj89jvs9va
  • SHA256 35375028a2cc4876b5a8476876ad75a037b8c4e303589ce6e9d9c61aaba9f74c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • gozi_ifsb

Botnet
  • 7253

C2
  • web.vortex.data.microsoft.com

  • ocsp.sca1b.amazontrust.com

  • stasecrets.com

Attributes
  • build

    250186

  • dns_servers

    107.174.86.134

    107.175.127.22

  • exe_type

    loader

  • server_id

    12

rsa_pubkey.base64
serpent.plain

Targets

    • Target
      deli.png.dll
    • Size 264KB
    • SHA256 35375028a2cc4876b5a8476876ad75a037b8c4e303589ce6e9d9c61aaba9f74c
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks