Extracted

• • Target

    ab962ec322df1fc50182f441cabf63bf

  • Size

    2.9MB

  • MD5

    ab962ec322df1fc50182f441cabf63bf

  • SHA1

    2fac31d29882bab127aad232a5d3970b41c1cc82

  • SHA256

    174ce56847b4edb2a0a886147468feedb7dabfa35a072bd1938028a342744495

  • SHA512

    82d1683717b0d96daf9827eebb2e680b0ef3df6c2e17c3f0a82d53360d18a02d260b0ebb4cb4e165ba4b8b7135e8392c4a5fd96048a666ee1647da6ba58a1a0e

  • SSDEEP

    49152:2HEMffHkDZMVFaabaFAMAH509Baj8BBT4SfcsUjoh48TyMPkXdwkyZ:2kofE9EFCAMRHau42c1joCjMPkNwk6

  Score

  10^/10

  gozibankerisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2