General

  • Target

    21ea38129ff083fbda126a422046f1fc

  • Size

    1.5MB

  • MD5

    21ea38129ff083fbda126a422046f1fc

  • SHA1

    5056ac41ec27434cdace4812d116da2c3af99e46

  • SHA256

    b1bef5778df2c0998636f27c53839db93dc74060554f60783645561ed325c7b4

  • SHA512

    281d4194a4b8b54746c2c46ae1462fab6edda873a395f5df21b3dd74ffa33e80ffa594f2510e367f7d6290787f47495f2ba483144aba35199bb7dc0090d2eaef

  • SSDEEP

    24576:6v6dNAQIBg9Ev1jcSsCUOl9LwaRVqu0fboDjrDVtR8vbPi7On3K2xZITWmJ:46x9pEliauuYkDjrJtR8vL0OnvmDJ

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 21ea38129ff083fbda126a422046f1fc
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections