gozi_ifsb | 95921f6bde5e4d71fd4308822db46ce46b646d863037f89f236da7f0337c57d4

Analysis

max time kernel
413s
max time network
416s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
27-10-2022 03:14

Target

51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked_x64.dll
Size

375KB
MD5

215ab06e4b1fc675de00cf2cf7503bb7
SHA1

6e7316ce894902cd7f174faeaaa708e4ae6983ee
SHA256

95921f6bde5e4d71fd4308822db46ce46b646d863037f89f236da7f0337c57d4
SHA512

80457c66ad719bd23437a3cd295345624409e5ab8681f3bc098b3455e068fcfe30c5195360d9eee7a4c7d9f458093ee1e0833ae8d945031246ddabf5576fb61c
SSDEEP

6144:Uk7CHLMnP9oa639GOQXiyuopjCHLC+y5YUBu+Vo0IfBpXfK:UoCrMnP9oa8GRX2opjCNyY+Vo0IfBJK

Score

10^/10

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked_x64.dll,#1
1⤵
PID:1044