General

  • Target

    cc681cbce2eae4416eabea48567f9051

  • Size

    2.7MB

  • MD5

    cc681cbce2eae4416eabea48567f9051

  • SHA1

    0d9877ed1fb35bf43e64db246be387f699c09ac7

  • SHA256

    94f4f6cf259baac2f9e01921cb887c41f923ec5f258d86b0848cff39f201dbc1

  • SHA512

    749f39f8f63c3c24d528ab75cae8252cedc417e95535d3e9c1ef34e7e9a25c257a508fc775407cf43ef75c27b96c62faf65f425dc7a3f579235ffc6eaf35ad42

  • SSDEEP

    49152:g2djj7hG+S6NEbTx3Eib5eb5D0jRa1B6EmqhvmAsO61Sq6O3y4ek:g2p7hGHpNYeg1B6Fqhv7sO61564ek

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cc681cbce2eae4416eabea48567f9051
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections