General

  • Target

    647d9bdb9e903de17d01980f8c870cef

  • Size

    2.7MB

  • MD5

    647d9bdb9e903de17d01980f8c870cef

  • SHA1

    f767671da49d7291238ef97c491948df4187d464

  • SHA256

    f7ac6c834092e6d9924eab0513c1193f0faa37a255bd797a3d95b2e8fd733a30

  • SHA512

    011c1cba7b362e0fe577f63457c1d0e2c6276375b55f9460933b50f22ea0224f5de15633f602761617fad599818df76c61999c0005be91d2c6921e72ec12687b

  • SSDEEP

    49152:b+aK7LOkyDtKz1OZkgCC2EY+eeR95xgReVrsZ/pYj0X0KW/sP1Z+uyR9j:ypLuDtKxLgCSYNeH/gRsOwH8rzyHj

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 647d9bdb9e903de17d01980f8c870cef
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections