Extracted

• • Target

    643a308d55f9f249ffefa5bfa22f3656

  • Size

    1.5MB

  • MD5

    643a308d55f9f249ffefa5bfa22f3656

  • SHA1

    da5de6575a1c7228a523950ee97a54047a941516

  • SHA256

    10b57250452c238e5a76539cef04b70aa54704f0b33f306907209dd9b1db2b47

  • SHA512

    5e6017dad2c1d5e895a3151e63d58c2df1d6550cc6fbe7bd4068a42a8e6993eb9570f56d098ac8c11695b83284840afd3f4e46999c5bd00b7ba8763327233eb5

  • SSDEEP

    24576:EKpdaHwN+9pqm7s58FHB8J1fxLZEB5zgElvWZuN3Io/n5fQf8mybE0W:9d9Mzqm7s5AOJZxW5zDsuNFn5vxE0

  Score

  10^/10

  upxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2