gozi_ifsb | 713a22d40b69ce759e3860bbdae3ec2ad53a5256c573aace0e6b8d9be06ecf80

Analysis

max time kernel
310s
max time network
504s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 00:07

Target

3a252ac37d78baad0a81242c0cb2bd68208c12267aa87d3cd3c5d594f1de27a5_unpacked_x64.dll
Size

196KB
MD5

f677bb3ee8812c02f64b37624b6e0360
SHA1

10919b983ad9323beb331c94a2f057eaa22107b0
SHA256

713a22d40b69ce759e3860bbdae3ec2ad53a5256c573aace0e6b8d9be06ecf80
SHA512

1fdae1ca1cbf4a97acaa4b995459633668d94604d1e84f33c7ed22aa0a4f9e481586659390c8def65c41f97ddda04765987810a095d4a1cd86246d7c2fcd1e54
SSDEEP

3072:5/5JjVkzCrR73kBTWY32mUcFsE0oDeqFV8g5Du/QC2vd10nnK:5DjuzC173RY3FGoKqFN8/u0n

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3a252ac37d78baad0a81242c0cb2bd68208c12267aa87d3cd3c5d594f1de27a5_unpacked_x64.dll,#1
1⤵
PID:4532