Overview

overview

10

Static

static

7

a438c5ce8f...8d.exe

windows7-x64

7

a438c5ce8f...8d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a438c5ce8f98d7fedbfde163966a3e8d

  • Size

    5.8MB

  • Sample

    240225-tptr1sfe72

  • MD5

    a438c5ce8f98d7fedbfde163966a3e8d

  • SHA1

    81dfd9be7c96a747137eb2ba99b54fc2b83682b1

  • SHA256

    78142da8ae2bf87830295cf35b8cecdbf51e66f916d19efc8c3f6dbe251c94b9

  • SHA512

    aea2332203096e055ebe9c3c5a114e10c3d507af673c4def64ef7568561243dba61f215aaccb671c92c396d1792ff4f4fb1d6fe7807295a4e13fdbc32484462c

  • SSDEEP

    98304:UHnNFADCeiGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:AAue8GhRaaCkN9qHGhRa

Score
10/10
gozibankerisfbtrojanupx

Malware Config

Extracted

Family

gozi

Targets

    • Target

      a438c5ce8f98d7fedbfde163966a3e8d

    • Size

      5.8MB

    • MD5

      a438c5ce8f98d7fedbfde163966a3e8d

    • SHA1

      81dfd9be7c96a747137eb2ba99b54fc2b83682b1

    • SHA256

      78142da8ae2bf87830295cf35b8cecdbf51e66f916d19efc8c3f6dbe251c94b9

    • SHA512

      aea2332203096e055ebe9c3c5a114e10c3d507af673c4def64ef7568561243dba61f215aaccb671c92c396d1792ff4f4fb1d6fe7807295a4e13fdbc32484462c

    • SSDEEP

      98304:UHnNFADCeiGQZaXhP5a9UEI+eG9jAkbkR79D+cVItGQZaXhP5a9UEI+eG:AAue8GhRaaCkN9qHGhRa

    Score
    10/10
    upxgozibankerisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks