General

  • Target

    d46d61c2d27ac2252cbbcb9b858a576b

  • Size

    2.9MB

  • MD5

    d46d61c2d27ac2252cbbcb9b858a576b

  • SHA1

    5143b4f3ad3eb8e0b3663e13161e0e223eb043ac

  • SHA256

    3f9842cb46d70df9218242b6491d73058d3ac727cdcad492024c0e1bdbb6eb3a

  • SHA512

    eb6cd2be3fd5426b80278240c6a681cd7ba8e1725935367a015408dec1fffd97cc1197b160d690e4ba3ff59acad6aef43b76b836bc4334fc65f3c50f13523ec7

  • SSDEEP

    49152:ZGQx911MdeZfx6B4lz6bNltP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:QQp1SeGB45altgg3gnl/IVUs1jePs

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d46d61c2d27ac2252cbbcb9b858a576b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections