Analysis
-
max time kernel
131s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
23/03/2022, 05:21
Behavioral task
behavioral1
Sample
gozi.dll
Resource
win7-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
gozi.dll
Resource
win10v2004-en-20220113
0 signatures
0 seconds
General
-
Target
gozi.dll
-
Size
43KB
-
MD5
d1a3c115a2cee09715572c7ee70451b1
-
SHA1
44d4963140af2515e2884b3e8077fed446e01438
-
SHA256
4d34a7f79a78d18656167c38f4fb33d5e9a3e233e84a2238f2d0f6df208b52fa
-
SHA512
324baffb400377b53893488d1db31f28d4549b6086909e2c8f91010648cd424d7d51db4a78bdfd1286b51978e7b7c603a39828b2036c42c578c984f1f7e89ab5
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2800 wrote to memory of 3272 2800 rundll32.exe 79 PID 2800 wrote to memory of 3272 2800 rundll32.exe 79 PID 2800 wrote to memory of 3272 2800 rundll32.exe 79