Extracted

• • Target

    4f6872a70b89fafbcd1784c88f32d548

  • Size

    5.3MB

  • MD5

    4f6872a70b89fafbcd1784c88f32d548

  • SHA1

    f02fdeba13fc84ad1a5247e9718327ce182ef188

  • SHA256

    d08e57083528564910ff1d5be69dc6120d69c5fb35d521df6651693c000a8208

  • SHA512

    0b3e693f64ded78432dc4d680bc623035da0ac2bc2c8a5d76d1dbb5d30184fe5058c89ce9d39081abaf3902a08eeab958185bb1a186c5db6f1796d279c3a5561

  • SSDEEP

    98304:eqEmYHrEiSBUJRcWa5VNqMGjAKaUJRcWa5V:efmYHoxBADapDADa

  Score

  10^/10

  gozibankerisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2