General

  • Target

    a0c219625b2b62397124e31086ea695b

  • Size

    2.7MB

  • MD5

    a0c219625b2b62397124e31086ea695b

  • SHA1

    8f0a69aeec7dfee1c7a9a6cb852c37bc18b31ab1

  • SHA256

    35e346550a57e855a05f2623ac136ad746f0ef64cce547e65f2a19aa7b0d697a

  • SHA512

    ff36e7e6c673559bccc0d12481e9cad6580dabac2532cc1cd328762d2051a2acb3222959f27f547091bbd28e12b6714b19e9299473be3201f5dfe09281e0bcaf

  • SSDEEP

    49152:/BGTHAUiOWumhncjwj0tXnWR9mmp0oQipdAjXyt9/Z+38MBEuHgkNR9j:pGTHAyjLWHmmp0oFpoi3/b4EufHj

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a0c219625b2b62397124e31086ea695b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections