gozi_rm3 | 3eda4ea2e2285931c413fdeec130d0075141b603311087ebddc2ce9989d5eb14 | Triage

Sharing

General

Target

3eda4ea2e2285931c413fdeec130d0075141b603311087ebddc2ce9989d5eb14
Size

92KB
Sample

220201-mkvp7achfn
MD5

13f6db39926c7f0f3ad8240ad9e54ac4
SHA1

1e7cdecc7b83ebd52cb2e62001b97c9cc10c4eeb
SHA256

3eda4ea2e2285931c413fdeec130d0075141b603311087ebddc2ce9989d5eb14
SHA512

4c765a6c64f6845022821dbb46ee1d093e27cfd2476f5b67a9d8f563fa10da98b213a2e0917d77462dadee53c8e0169a64ffe5a6cd285c5848563371569f486d

Score

10^/10

gozi_rm3 persistence

Malware Config

Targets

- Target
  
  3eda4ea2e2285931c413fdeec130d0075141b603311087ebddc2ce9989d5eb14
- Size
  
  92KB
- MD5
  
  13f6db39926c7f0f3ad8240ad9e54ac4
- SHA1
  
  1e7cdecc7b83ebd52cb2e62001b97c9cc10c4eeb
- SHA256
  
  3eda4ea2e2285931c413fdeec130d0075141b603311087ebddc2ce9989d5eb14
- SHA512
  
  4c765a6c64f6845022821dbb46ee1d093e27cfd2476f5b67a9d8f563fa10da98b213a2e0917d77462dadee53c8e0169a64ffe5a6cd285c5848563371569f486d
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2