General

  • Target

    fd71e5d164810714f9dd302edee76fac784f2942a6e80b0cad0c58e2da23fbdc

  • Size

    3.5MB

  • MD5

    ee6da63b8d80e11eb468166c07c4332e

  • SHA1

    bff51252abe3a4ef47a7ab20ce2c2237ce3c9138

  • SHA256

    fd71e5d164810714f9dd302edee76fac784f2942a6e80b0cad0c58e2da23fbdc

  • SHA512

    f20381164f8a90de76c33032eabe32f8d94f26d1c7a64e394f4fa1a1db532d5c84c8427af0da474a6289ad786641c235d137d7857c2fd2ff6476c8c09f6cceaf

  • SSDEEP

    49152:LhE/hGyc92Q4sGFilFT4IZi3O96wrhHHfT81CEhx+XOtWEbV/q5WVp4QHhmeZP5P:LhIhGOQw+Sgi32HHfImWQQry0loYWBq7

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd71e5d164810714f9dd302edee76fac784f2942a6e80b0cad0c58e2da23fbdc
    .exe windows:5 windows x86

    57d1d373af6c2633c4a73d8e9d5d330f


    Headers

    Imports

    Sections