gozi_ifsb | f3c0cb53a4e88d97445b3276cea4e101b60535535ec6e620185f6d43e6604816

Analysis

max time kernel
503s
max time network
506s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 00:07

Target

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4_unpacked_x64.dll
Size

359KB
MD5

012cfbbe670e099085223c89e86b771a
SHA1

889a7c1366eea7dbcfb0df549822b0948333936d
SHA256

f3c0cb53a4e88d97445b3276cea4e101b60535535ec6e620185f6d43e6604816
SHA512

8466aafa9bb52423e50c28e79a04908c5193afcebd2248b0c20ad21e3bdc301386b912a9538c44f4e62dbf57201347c921b99182aca02a05d01e10b083bfd445
SSDEEP

6144:Ac+0IiFwDDl+sMy2iW8REaezFLRlABdCK/stVhfNykn529o8ynqTkAP/fC:AX0IKwDDl7My9RE3zDlABdC5VJp29o81

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4_unpacked_x64.dll,#1
1⤵
PID:1128