Extracted

Extracted

Extracted

• • Target

    Informazioni.url

  • Size

    192B

  • MD5

    c6c6f5a3d3e0444820d2865c7f1a07bc

  • SHA1

    5f9c9620e315b09802e8e532f48195a9e60f2d2c

  • SHA256

    59944e8c11bfc2d065ef88fca0a033313361ae424962c34573755da99badbf3f

  • SHA512

    4a1a66efff8336bbde327c9256e6e473193c901bc47d1b7648bbfa29212490f3f47092ba060c47cc77a1e6952f6bf814346045d2d1c1eef556ba07d08f69c628

  Score

  10^/10

  gozi5050bankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2