Analysis

  • max time kernel
    31s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2023, 08:46

General

  • Target

    20230308_unpacked_gozi.bin.dll

  • Size

    43KB

  • MD5

    e12d09d7f5bc156c651ad31508626593

  • SHA1

    afdbc23b99f31640b473772dc1db24ffc9ed61a9

  • SHA256

    5bd64a7b018db5b4538d8077ad7a50871dc6c5682a1f151cc5e8a42673e4384f

  • SHA512

    2c60802a1c448e3cbbaee2a99744abbbc008ac8ba369beb1c0728629b93f78e587dea542b1c1556f0be203863fdcb3abe0094b0cc08ccf4c4324ff43914ace00

  • SSDEEP

    768:5c0gsqVXye2rS/Q4VYXQIVpCHlNBmQWGk2j+A6ewBvu7gpzhK3D1Gc:+9sq8S/QEYXQIVWlvmYp6ewNu7hD1Gc

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\20230308_unpacked_gozi.bin.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1320
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\20230308_unpacked_gozi.bin.dll,#1
      2⤵
        PID:1544

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads