gozi_ifsb | b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9

Analysis

max time kernel
408s
max time network
411s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
26-10-2022 23:52

Target

056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64.dll
Size

327KB
MD5

7b454c49a9bdc6795a3abab900cff981
SHA1

fc44fafb8f04311a6bab95c6d4336683621725ff
SHA256

b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9
SHA512

b1ac662115809a735a0543c65eed24fa9f4d9d52095b4a3ef5538b0a56f9a92911b9992a67386926bf12732d92228f3e4faa1b26149e2e38ed981182bedd90d3
SSDEEP

6144:gTIdP2DZGIA3nDMnVzbhT8GHoU95jsvC39+pyory5hhA:gseZwTMnJ1Ho7C39+pyorcA

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64.dll,#1
1⤵
PID:1532