gozi_ifsb | b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9

Analysis

max time kernel
499s
max time network
502s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26/10/2022, 23:52

Target
056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64.dll
Size 327KB
Sample221026-3wzfhsaagm
SHA256 b5c292b6a64336e0ceecafa13687b0e26f287a38b2ff8c67d450fe70a49270c9
MD5 7b454c49a9bdc6795a3abab900cff981
SHA1 fc44fafb8f04311a6bab95c6d4336683621725ff
SHA512 b1ac662115809a735a0543c65eed24fa9f4d9d52095b4a3ef5538b0a56f9a92911b9992a67386926bf12732d92228f3e4faa1b26149e2e38ed981182bedd90d3
SSDEEP 6144:gTIdP2DZGIA3nDMnVzbhT8GHoU95jsvC39+pyory5hhA:gseZwTMnJ1Ho7C39+pyorcA
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\056c73060f1553f213982a5bfb4d3535ef0594e1fcb70c8a67bc83e6b5d972c5_unpacked_x64.dll,#1
1⤵
PID:3744