gozi_ifsb | f17c218281891da09fc54ff6cff10e8434a6710b3c0de540cd9ffd0c593792b3

Analysis

max time kernel
489s
max time network
492s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 00:02

Target

249ba989225747cf269f49e6c14b516031b5071bdbcb5b07843af6f920b2e1ab_unpacked_x64.dll
Size

177KB
MD5

b4d2cdc7fffc68ca3ec95c30b96e3d18
SHA1

b4db6203fbecf2ef38372e0f9bbc3fe960e1f07a
SHA256

f17c218281891da09fc54ff6cff10e8434a6710b3c0de540cd9ffd0c593792b3
SHA512

349ee2feb39dddbe55ec33dd52a8b1988a2579cbcc40d89c1e6d330f46e2484561c41221b5c5f533581123044a4dfe89b78ac19d54c37241920965bcf721b4e7
SSDEEP

3072:isTmBr1+87Wxn+ppJL49PdrtPAle/9o+qZZHIxlYDkImLPq:81Vu+4dr9R/9o+q8l1q

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\249ba989225747cf269f49e6c14b516031b5071bdbcb5b07843af6f920b2e1ab_unpacked_x64.dll,#1
1⤵
PID:4964