General

  • Target

    7b756bc8dc29c1bab91c3783f503fcf5

  • Size

    2.9MB

  • MD5

    7b756bc8dc29c1bab91c3783f503fcf5

  • SHA1

    88a477755a440f33f430b82a6d550832fd2c4cd2

  • SHA256

    aaf0167587cdf010f17cf59978545ba5fe9f84fa7472b4c12a92bc8b1f7402e5

  • SHA512

    5f5e778df82cc20d186455b6493e20e30dbb865390489a193561cb65859caa59b774e9a3a93a67d1c269dca097fcfcfa99b3bd9cca214bba7d964171b050f750

  • SSDEEP

    49152:xjgnaK0u5SXpMITrchwgdMq9Baj8BBT4SfcsUjoh48TyMPkXdwkyZ:5gnU3cWgdMqHau42c1joCjMPkNwk6

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7b756bc8dc29c1bab91c3783f503fcf5
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections