gozi_rm3 | 3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78 | Triage

Submit
Reports

Overview

overview

Static

static

3d8a0d250d...78.exe

windows7_x64

3d8a0d250d...78.exe

windows10-2004_x64

6

Sharing

General

Target

3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78
Size

751KB
Sample

220703-c8r9vsccgl
MD5

c81f71163fbe9c29bf34ad33e1678cad
SHA1

f49416d11f6b88cd918567f0a5edbab0376b03b6
SHA256

3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78
SHA512

710a776f0e74b97a94cdab4606f5d923034b2cdcf22be5beab6addd7a56d9d02a389fbf2d01c94aa1a78c0ae081dbfde1c792c579fe4f77c6f03830f28712d5c

Score

10^/10

gozi_rm3 banker persistence trojan

Static task

static1

Behavioral task

behavioral1

Sample

3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78.exe

Resource

win7-20220414-en

gozi_rm3 banker persistence trojan

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78.exe

Resource

win10v2004-20220414-en

windows10-2004_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78
- Size
  
  751KB
- MD5
  
  c81f71163fbe9c29bf34ad33e1678cad
- SHA1
  
  f49416d11f6b88cd918567f0a5edbab0376b03b6
- SHA256
  
  3d8a0d250db8d3601e812e6c6e38ba97e12b7c9e455cda1b6bc33371b9dd6c78
- SHA512
  
  710a776f0e74b97a94cdab4606f5d923034b2cdcf22be5beab6addd7a56d9d02a389fbf2d01c94aa1a78c0ae081dbfde1c792c579fe4f77c6f03830f28712d5c
Score

10^/10

gozi_rm3 banker persistence trojan
- Gozi RM3
  A heavily modified version of Gozi using RM3 loader.
  banker trojan gozi_rm3
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gozi_rm3bankerpersistencetrojan

behavioral2

© 2018-2025

Terms | Privacy