Overview

overview

10

Static

static

10

526bff63e3...d3.exe

windows7-x64

8

526bff63e3...d3.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: missing cfgextr callback for rule "Gozi_FJ_loader_0"

General

  • Target

    526bff63e3f6046522fcf383d0fece34cd9530be4256e2835a90ac338343cad3

  • Size

    79KB

  • MD5

    5a4f1f23f5e1207a6f8ae99829151002

  • SHA1

    6a5475356b3189ffad38107781ac3771e3d6b5cb

  • SHA256

    526bff63e3f6046522fcf383d0fece34cd9530be4256e2835a90ac338343cad3

  • SHA512

    bde945e83c2ce9350950a739027ed04f2a2f5806860ac092ff291c8e1a778cea75d40d3016281a84563ac56dafe28b8a916c0a2c0542278bc4a38ab9583f7339

  • SSDEEP

    1536:zNniJNX8r6rFQ7ybfydyV9wmYzcFKZFDmQ5OCdP:MfX8r6rkybfyd6wmYQFKZsQ5hZ

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 526bff63e3f6046522fcf383d0fece34cd9530be4256e2835a90ac338343cad3
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections