General

  • Target

    gozi.payload-d

  • Size

    43KB

  • MD5

    9ef8d885645eda3a8e1cc37ada96a4cc

  • SHA1

    295c25d68f7d9d145a54ddc0b7f7034aea133ec0

  • SHA256

    a2c59a517b15887f20e0183d920412b17c6dc77f7eafbb434f37faab0a4d7757

  • SHA512

    5c14b0de7342fdd2ec64ebf095e2774eb0f201423bd0b370895f2da7d8991329c4c3a6c88f7e54b2fbc9f174bbbbb5da74583066f7cb797b6d3679ad12e130d7

  • SSDEEP

    768:Ns0zIQOuf1WrHWngROYD3Ps8WyAqa5v+BZ20efofs7gpdsmT:NsSIQO8184gRO8sxp+BE0efUs7K1T

Score
10/10

Malware Config

Extracted

Family

gozi

Attributes
  • build

    250257

  • exe_type

    loader

Signatures

  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • gozi.payload-d
    .dll windows:5 windows x86 arch:x86

    ef075d26b728b78a932306e24062e80c


    Headers

    Imports

    Sections