Extracted

• • Target

    7357b26945b168261bb1dff98749d097

  • Size

    2.9MB

  • MD5

    7357b26945b168261bb1dff98749d097

  • SHA1

    7bfd83eb3a8adbe89cd8eacac9e5a1c5e10c77a5

  • SHA256

    229a633e13eb3b3692f08d86072aef095afd9865ec10b1cf9c08485f451f7d87

  • SHA512

    203b7439dfea01a62f7a3d1d2e32aa5590d4d41cf973c1a867cbd43ee1d9961951282d237389dcd61918bf87e88b0a2d349ad1c2986a37520ba0a0e7e68259f1

  • SSDEEP

    49152:KE9z3Vtwiba5ZP+P2Kt0XrQQERjDP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:KE9z3VOfXKS7ERjDgg3gnl/IVUs1jePs

  Score

  10^/10

  upxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2