General
-
Target
73972d59278c9ff5d05342324d16d4f6
-
Size
2.9MB
-
MD5
73972d59278c9ff5d05342324d16d4f6
-
SHA1
215d00357da0169c4ea745c45ed6c901fd6c5fc0
-
SHA256
47ea126da47178dd7745cc741c2928b300cd9e6df63cba209bc6790e60e5ab41
-
SHA512
b6ff129ec97141563512aa6e2b76e945c642958579355323ae39430dbf9cc1ead485f8c393185c69aed141816561254e57cf7e5b0cab2f117a06e23f7c0ee625
-
SSDEEP
49152:B28KZyqVpEC7VDMHXu3pE1IVuhOs2HP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:LbqrtqXu3eScOsygg3gnl/IVUs1jePs
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
73972d59278c9ff5d05342324d16d4f6
Headers
Sections