Extracted

• • Target

    2024-05-11_5332c0a59e1fbee2a7897c2a9dea9b3d_magniber

  • Size

    15.9MB

  • MD5

    5332c0a59e1fbee2a7897c2a9dea9b3d

  • SHA1

    48e81304a02be2eada884d9bc8bc44b2aafebf16

  • SHA256

    65b790b69a022c8a968515fd8a535ff7785c885e56868f306171a63bd611bbb3

  • SHA512

    70a52983f234e23c36fc6bb9e091bbbbc566cccca6caab311c89b9e6f3f6c80de270a14f7c90fa4887b57c185b076e59b25ef3416b3af7918816af1cf1d23f17

  • SSDEEP

    393216:jgMdJwI3saK5c54u2srOQYiclgeOco9t/:jJL3Bu/QYisOH/

  Score

  10^/10

  gozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2