Overview

overview

10

Static

static

10

15f6b5a0000.dll

windows7-x64

1

15f6b5a0000.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    15f6b5a0000.dll.exe
  • Size 227KB
  • Sample220908-qdr79sefd5
  • SHA256 0e50c1ce3522fca4206c0ed3d4bd7ecebf821ba63da2bd7349e85e833083cee8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gozi_ifsb1900

Malware Config

Extracted

Family

  • gozi_ifsb

Botnet

  • 1900

C2

  • apnfy.msn.com

  • 194.76.225.61

  • 185.212.47.186

  • 45.11.180.215

  • 45.11.180.219

Attributes
  • base_path

    /doorway/

  • exe_type

    worker

  • extension

    .drr

  • server_id

    50

rsa_pubkey.plain
aes.plain

Targets

    • Target
      15f6b5a0000.dll.exe
    • Size 227KB
    • SHA256 0e50c1ce3522fca4206c0ed3d4bd7ecebf821ba63da2bd7349e85e833083cee8
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks