General

  • Target

    05bf5ff7639a53e7c124274ee73b1fc2

  • Size

    5.8MB

  • MD5

    05bf5ff7639a53e7c124274ee73b1fc2

  • SHA1

    67263527143f85bc7aa81da7441cf96185be11a8

  • SHA256

    7d345a90a541e14680d48bbb8ffa583a08e32cce73e0b8ff6fd31dd0866b0fa7

  • SHA512

    fcb405caa48190f1eecf7239facac458fe5d2019c369df140cfbdbadfe047747189e5056e110484ca949127c49de8e9f67e67bb4aafc232c25241718a6e3d8c0

  • SSDEEP

    98304:phP+Puf2JxFHVi3q35l7m5E2DK4yyiI04u4Jbi3q35l7m5E:feuf2JxFEu5l72Kwij4Puu5l7

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05bf5ff7639a53e7c124274ee73b1fc2
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections