General

  • Target

    4527af26c3adbe2862095955fe21c654

  • Size

    5.3MB

  • MD5

    4527af26c3adbe2862095955fe21c654

  • SHA1

    633373df9dda17ec1a122cdc4f72c1f0e4cc56f1

  • SHA256

    ab313e4f21b734b91ef3969870dd8efd400868adc0bbd6ce6d179f3714e9a84b

  • SHA512

    ed1473e7128a177b1f0841a81b13a42145b4ab5c3be7d38be96ff4cd5c833c2cc8a772ee8a9264808d188f62a2bacd26dde250846ef4a1e3a4fc6b58a7e44e93

  • SSDEEP

    98304:cuqUM/hfMqWP1pSHAqoB2q+6Arcwb4GH4/ZNUlik1HAqoB2q+6Arcwb4GHj:cuqP/hfeo8BipcwkGm6d18BipcwkGD

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4527af26c3adbe2862095955fe21c654
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections