gozi_rm3 | 606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4 | Triage

Sharing

General

Target

606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4
Size

53KB
Sample

220201-ma9rcsdcg6
MD5

572b7484b78a4d209194ceed7158000e
SHA1

561e75e10e9ebafc94751dab41da4e6b86e5c324
SHA256

606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4
SHA512

dfbe028ddfb4360f7735f987a3b2681af7ffb4159b5dbc6333606466dcbd77c58b14586106cdb89cfac36efa1ed42b48f4833b190f009ce9738a870f80d207d0

Score

10^/10

gozi_rm3 persistence

Malware Config

Targets

- Target
  
  606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4
- Size
  
  53KB
- MD5
  
  572b7484b78a4d209194ceed7158000e
- SHA1
  
  561e75e10e9ebafc94751dab41da4e6b86e5c324
- SHA256
  
  606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4
- SHA512
  
  dfbe028ddfb4360f7735f987a3b2681af7ffb4159b5dbc6333606466dcbd77c58b14586106cdb89cfac36efa1ed42b48f4833b190f009ce9738a870f80d207d0
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2