General
-
Target
96235af598bdcbf8df2253786299338a
-
Size
5.8MB
-
MD5
96235af598bdcbf8df2253786299338a
-
SHA1
21b4ba2c811a1fd2aa0e33b5ddedb0d67c62f170
-
SHA256
5ecee675a9ab77481faf9c8e20ec567d9a75aee2a64e0ae1968a9c5ae1c9719f
-
SHA512
989b8079e573f20a8674799bb4359e7defcc69a1e4c81c4d51617f2ad6636eef8a91e04804cad189010e86fc97c34cd307464940b6c77a34280af45e5844dcb5
-
SSDEEP
98304:dTvQI2CSvyzRUMLW/nHau42c1joCjMPkNwk6alDAqD7z3uboHau42c1joCjMPkNQ:CIHHdoHauq1jI86FA7y2auq1jI86
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
96235af598bdcbf8df2253786299338a
Headers
Sections