Analysis

  • max time kernel
    26s
  • max time network
    25s
  • platform
    windows10_x64
  • resource
    win10v20210410
  • submitted
    13-05-2021 02:09

General

  • Target

    fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004.exe

  • Size

    288KB

  • MD5

    119e87bcf548d2c87e08f3785a46d12a

  • SHA1

    f36c4c87b3cdc1c6b8ee1a5389e3b3634729aa2b

  • SHA256

    fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004

  • SHA512

    170d0e0c0c2b33771d56eedeedb8efe96a29c332c13580f374b7a8d888d6320857626e5b80fba10125c45d2d5c29b87a9313c66a69a3cdeb4f92f460a2f502ce

Score
10/10

Malware Config

Extracted

Family

gozi_ifsb

Attributes
  • build

    217173

  • exe_type

    loader

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004.exe
    "C:\Users\Admin\AppData\Local\Temp\fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004.exe"
    1⤵
      PID:3656

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3656-115-0x0000000000EE0000-0x0000000000F31000-memory.dmp
      Filesize

      324KB

    • memory/3656-114-0x0000000000EE0000-0x0000000000EEF000-memory.dmp
      Filesize

      60KB

    • memory/3656-116-0x0000000000A00000-0x0000000000B4A000-memory.dmp
      Filesize

      1.3MB