Extracted

• • Target

    c4131be13937f631d624b3458609b9d2

  • Size

    2.7MB

  • MD5

    c4131be13937f631d624b3458609b9d2

  • SHA1

    74c13d7e162bde3e791fcf08e7f70268e97818fc

  • SHA256

    f0add1bf4907a76440e2ce3ed8caa6e7fbbe291790d98436f825f078bceeb343

  • SHA512

    122da9df69c73f93eac966c360c756da1ddf5f2971822faaceeb047fdff088041a5842bfab081b1fc270b3d1d13a9a3ac31d2efb6f2be505568d605512f369be

  • SSDEEP

    49152:jsQN3rZvu0LHORwTIkVr/KndEX9FQoXNA/J3bMxV9si8x6Yaz/5Vqkif:7N3lv/SRwTIoWdCC+NOhysi8xa5Mkif

  Score

  10^/10

  upxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2