General

  • Target

    d967bb0af7519f84164e4ace8306dfd46755849d.exe

  • Size

    3.5MB

  • MD5

    a3013cd136ad30ed2623aa261773e693

  • SHA1

    d967bb0af7519f84164e4ace8306dfd46755849d

  • SHA256

    cf5ecf879033d5104c95384d7fb838267dab5c233cc9f52711a9be025c4740e3

  • SHA512

    08f002d041cf202b785522074bb8f7ed6cf30bb315aea9a0a89ff7116338047444fe70b8e5bd3817426758abc373b7aedc3f730faf8c74253dab39edceb979da

  • SSDEEP

    49152:dEjEamQb2OguN8Dfk5JEG14wv2QwnN4iTapOcaPKfjtD8cEOxeuxzS2hPV5T1gWD:dEjlmQbfgSgwvSnN4iVJu/0xir8YpqY

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d967bb0af7519f84164e4ace8306dfd46755849d.exe
    .exe windows:5 windows x86

    da615ad92cf6c6d9159a7eb2aceeb372


    Headers

    Imports

    Sections