Extracted

Extracted

Extracted

• • Target

    Contratto.url

  • Size

    192B

  • MD5

    aa05bdf7862a64f54d6e281944fb0f51

  • SHA1

    60fe537372be17e284f0121f5da307325da6ca92

  • SHA256

    e798fb0280fbc91cbb32234af0c55c4c6e16f528f8282057e334c2055ac07d13

  • SHA512

    e471d9b97fc022e3a769a936f37590da9e3f32e76fb5934ffea91ef8c1fb39f719330cb5299fbb38272bb5b34aac8e28ab05bc2180478eb1bca839911a87a302

  Score

  10^/10

  gozi5050bankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2