Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    02-03-2022 22:42

General

  • Target

    gozi.dll

  • Size

    43KB

  • MD5

    c72e3eba124896e10bd8acc54b1565fe

  • SHA1

    d19dd19fae7d61293e1879034b8a784f694b76e9

  • SHA256

    44b62bc022a43cfa60975be021a4f4d34caead61d23f2a925b7b470899b0195e

  • SHA512

    92929eafa1b48b79cbe00a65c7cd82d65261bc472cd2c5f0941bbb2c76a3721de9d0090c6053b9f53ed193a2b3fe9b9ce7406d0781ae52c3985898a318f68595

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\gozi.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1620
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\gozi.dll,#1
      2⤵
        PID:836

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/836-55-0x0000000076641000-0x0000000076643000-memory.dmp
      Filesize

      8KB