Extracted

• • Target

    7ccaa25820a91a547530e78ed34c711a

  • Size

    5.8MB

  • MD5

    7ccaa25820a91a547530e78ed34c711a

  • SHA1

    80caa875cae77ff6101c2c6d81e3e8ccfa44a2ad

  • SHA256

    ad6a6869f647cee0494e8c94ecbc33b89cb23ed7bda3281364d3c166ee63a042

  • SHA512

    223ffc79d51f513ce8d99cbe3f71601cb7687307d0e34fa9167288b0067f3391d24ea577070d89e7b0eb05ac6adde653d1b61df050316376eddf07ccec1006eb

  • SSDEEP

    98304:Le2emGcPBMOgg3gnl/IVUs1jePsgi2OwLUl5PHNCqQmRgg3gnl/IVUs1jePs:y2emX53gl/iBiPQiLUDPH4/mHgl/iBiP

  Score

  10^/10

  upxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2