General

  • Target

    b9910483a93ce128340c2c8f52f707f9

  • Size

    2.9MB

  • MD5

    b9910483a93ce128340c2c8f52f707f9

  • SHA1

    d805ee52b8546fe4047df2c156d5ea26f060b634

  • SHA256

    270905ca19b8c1e8b9d2032a38338158d4e0fcf898eb0e0179e18dab080d22b5

  • SHA512

    431afbaae1eecd1d5e1a7462ed0f453b2e34cbb6ffa21308b3b3f5e6f9fb26ae8ec7fe62f7a7e1a1bb20ff6fb2277823335cbbcc7fee5b4b54842cf63e66810a

  • SSDEEP

    49152:p7duzulQx/vbDxwfIXoAxFHHN74NH5HUyNRcUsCVOzetdZJ:phP+Puf2JxFHH4HBUCczzM3

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Gozi family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b9910483a93ce128340c2c8f52f707f9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections