gozi_ifsb | 2d9b9de594b0e492d22258446ddf99e3962cfd5024345702aa3070a5d77e4c60

Analysis

max time kernel
319s
max time network
496s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 00:07

Target

42923683022f255205e9e0269abf1d6d676b4b4dfa4afec040fb4b21c24e0676_unpacked_x64.dll
Size

213KB
MD5

513789aa7df7e5e4946db3abebae67d9
SHA1

e3c5dafdd760ce784db60f4246f6fa03f6d658d2
SHA256

2d9b9de594b0e492d22258446ddf99e3962cfd5024345702aa3070a5d77e4c60
SHA512

f471bbe3e0d7a33f28e868c563ccb526713a514c7b8afbc38817c8a7b5bda16cb7ea2303cbbf5eb72902c64ff3344eae632bc098185c99877102909f24866e95
SSDEEP

3072:HUaaULsZBelnhgJjGCL0pYQjI383dyUtq2sbtlroFeq+io3iIDPCiZpFip:HNaULUBelhgQCL0aVedyn5po8q+iSCp

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\42923683022f255205e9e0269abf1d6d676b4b4dfa4afec040fb4b21c24e0676_unpacked_x64.dll,#1
1⤵
PID:1664