General

  • Target

    2024-05-01_389acac45668aa513ce9b964a89ccbd1_ryuk

  • Size

    2.3MB

  • Sample

    240501-a21xbabf3t

  • MD5

    389acac45668aa513ce9b964a89ccbd1

  • SHA1

    45456a7d4e85991eaa38becacad6aa45af7093f9

  • SHA256

    6815da7ef89424a01d33bd7f004ef4ecfdcf43c3e621096cb237a995a5303780

  • SHA512

    17763305c241147a5518ed183624e1a280d8d000ddabf5946a86905c3485ef4fbd3b3dd4f44ef0eef1b1ee2eefe5cfc530a8d6d39e73809b3c2f6ee82c6d0a1d

  • SSDEEP

    49152:zosQHMmpQAaR824OnqDPqFmhlyjsrrJLp2lUEFP4+Po6kk:n4O2P5JLQlVt4ib

Score
10/10

Malware Config

Extracted

Family

gozi

Targets

    • Target

      2024-05-01_389acac45668aa513ce9b964a89ccbd1_ryuk

    • Size

      2.3MB

    • MD5

      389acac45668aa513ce9b964a89ccbd1

    • SHA1

      45456a7d4e85991eaa38becacad6aa45af7093f9

    • SHA256

      6815da7ef89424a01d33bd7f004ef4ecfdcf43c3e621096cb237a995a5303780

    • SHA512

      17763305c241147a5518ed183624e1a280d8d000ddabf5946a86905c3485ef4fbd3b3dd4f44ef0eef1b1ee2eefe5cfc530a8d6d39e73809b3c2f6ee82c6d0a1d

    • SSDEEP

      49152:zosQHMmpQAaR824OnqDPqFmhlyjsrrJLp2lUEFP4+Po6kk:n4O2P5JLQlVt4ib

    Score
    10/10
    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Matrix

Tasks