General

  • Target

    ad315dd94439c50230f87b32e5e35d7a

  • Size

    2.7MB

  • MD5

    ad315dd94439c50230f87b32e5e35d7a

  • SHA1

    5029def4b0dd383384eaf144831ff43075a24b44

  • SHA256

    85890fdfba51634ddbd089d8996704cae6204ec44c9f4fd5124437b5272c436f

  • SHA512

    e3794d3e25b14e9339d216a041b751556dff22eeb096ca4be8b4033fc759675d25a16acbdaf984f9b6adda2fcba282204e99e287a5ea389afc9056bd2006044d

  • SSDEEP

    49152:xjgnaK0u5SXpMITrchwgdMPqo/N74KY86Y0+WtofT90Xw5xnLif:5gnU3cWgdMPN17PXNzWCh0A5xnOf

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad315dd94439c50230f87b32e5e35d7a
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections