gozi_ifsb | 78c562a206893a2648975b2b9170335f372b3af4db5e84611fb6aea16105ce4e

Analysis

max time kernel
422s
max time network
426s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
26-10-2022 23:52

Target

2013911086eeba13ee90a57d81a27fabdab52e9896f0ec55e7b9aec0528c57b7_unpacked_x64.dll
Size

200KB
MD5

4b5dc76b6d7036ea208c219231bbba45
SHA1

bafd670a07e56886aa0683dcf30fa7441e547b4d
SHA256

78c562a206893a2648975b2b9170335f372b3af4db5e84611fb6aea16105ce4e
SHA512

3f056b438b8faf2d43e142bf7c30c8063045fdc242d87f6bfe03322b668757adb99e777a76cc048d75479c4accfc8589ca16bd24df75fe440ce8e6de90d62c16
SSDEEP

3072:7g0klJ2Rk5yfZXNw2YEQJx8YACMJ/+oAelr/E6UJGwyw3u/wHuMO:k0klJ2Rk5yRmLEsNACzozlr/Ey0O

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2013911086eeba13ee90a57d81a27fabdab52e9896f0ec55e7b9aec0528c57b7_unpacked_x64.dll,#1
1⤵
PID:1060