Overview

overview

10

Static

static

10

606a5c5f9a...c4.exe

windows7_x64

1

606a5c5f9a...c4.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4

  • Size

    53KB

  • MD5

    572b7484b78a4d209194ceed7158000e

  • SHA1

    561e75e10e9ebafc94751dab41da4e6b86e5c324

  • SHA256

    606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4

  • SHA512

    dfbe028ddfb4360f7735f987a3b2681af7ffb4159b5dbc6333606466dcbd77c58b14586106cdb89cfac36efa1ed42b48f4833b190f009ce9738a870f80d207d0

  • SSDEEP

    1536:sxEQc1fBOwQMqVNPX5b6MWPj4rwbb79NHk1TzLyUPjLe:MEnfAwQMAPp21jei7k9HyUPjL

Score
10/10
gozi_rm3

Malware Config

Signatures

  • Gozi_rm3 family
    gozi_rm3
  • Ursnif RM3 loader 1 IoCs

    Detected the Ursnif RM3 loader, which is a heavily modified version of the Ursnif one.

Files

  • 606a5c5f9af86d4a1685a3a4f6d34ca5e6c99dc2e35669befd0091bd2e9747c4
    .exe windows x86

    4c63b68248e142bb0f68f8defc122148


    Code Sign

    Headers

    Imports

    Sections