Analysis
-
max time kernel
417s -
max time network
420s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
26-10-2022 23:42
General
-
Target
008c4bd6ee834d113cfc693af0ea90396eaa47e860bcdd567ffd964b57434e1d.exe
-
Size
442KB
-
MD5
e6d118192fc848797e15dc0600834783
-
SHA1
16d5ded68677f4a870423d3fd30da8377a5b2408
-
SHA256
008c4bd6ee834d113cfc693af0ea90396eaa47e860bcdd567ffd964b57434e1d
-
SHA512
872b50145bd84646a402558e65894c499a7340248e94e672a10009d2c55d03a0fab93a2dcca3b88163293adc9dffde5bfbec1fb0b33e78a6daed968b0d2fa88c
-
SSDEEP
6144:wha4jvM2RgxFPZToQ8rdCDbiAflI3EFJvSchM1md8PIZZUvtKanGhW5F8:MD05gBCDbw3EFAEQNIZW15nGs
Score
10/10
Malware Config
Signatures
-
Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
Processes
-
C:\Users\Admin\AppData\Local\Temp\008c4bd6ee834d113cfc693af0ea90396eaa47e860bcdd567ffd964b57434e1d.exe"C:\Users\Admin\AppData\Local\Temp\008c4bd6ee834d113cfc693af0ea90396eaa47e860bcdd567ffd964b57434e1d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
368KB
-
Filesize
616KB
-
Filesize
8KB
-
Filesize
232KB