Analysis
- max time kernel
509s - max time network
512s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
26/10/2022, 23:52
General
- Target 1130e8a4dc91f3b71db894d0088a9ef20422aa7d500b0291568d59c3c013fc4d_unpacked_loader.exe
- Size 228KB
- Sample221026-3w411aaahn
- SHA256 32e1199c6897512d47e8fbb0c9827d272355a193cdf693a6b3ec6232934eb4a7
Score
10/10
Malware Config
Signatures
- Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1130e8a4dc91f3b71db894d0088a9ef20422aa7d500b0291568d59c3c013fc4d_unpacked_loader.exe"C:\Users\Admin\AppData\Local\Temp\1130e8a4dc91f3b71db894d0088a9ef20422aa7d500b0291568d59c3c013fc4d_unpacked_loader.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4004-132-0x0000000000510000-0x000000000054B000-memory.dmp