Overview

overview

10

Static

static

10

c4b4ebc2e1...96.exe

windows7-x64

10

c4b4ebc2e1...96.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4b4ebc2e1a87efdcb1835a1ebd05b96

  • Size

    1.5MB

  • MD5

    c4b4ebc2e1a87efdcb1835a1ebd05b96

  • SHA1

    d813e76fb9b7ecad662419c744c3259295d98313

  • SHA256

    c2606697afc6de940b7bc6d915c555309f5118dfeb01b6f62dd5b2570ab8f6d1

  • SHA512

    5567132cb54400d6659f19ae1e04a96b4a9f87f2b42c671965f37588b600033df66c414910d00f1be4256c761d929ea76b2f5c3c88a9062bee9c76a3e14b3720

  • SSDEEP

    24576:ZhiB4vPKM1oOnIlx1YJ0t/p0aHzfULPXTP1PEVKbbw2t2CKyHZVhh/IUoPkczc:Zw4vmlzYJ0tWajU3P1PEV8tciLVIrW

Score
10/10
upxisfbgozi

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
    gozi
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c4b4ebc2e1a87efdcb1835a1ebd05b96
    .exe .ps1 windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections