General
-
Target
041705860d9c5376885f8a086a52aac0.exe
-
Size
163KB
-
Sample
240518-l66h5see95
-
MD5
041705860d9c5376885f8a086a52aac0
-
SHA1
4111c4bededfb5413fc2e682988849319721a506
-
SHA256
cc4820ba1af789e7fb0143124e57a25aae166cdd32734d9c1e9adcd5ffce024b
-
SHA512
f16408c038fc0444c9bccff51a44aa9ee4b0855b5802eca1465fcec6dbd1587dc624f811f27bd008f5a1ad2aaaf67fb9ba135062dac45694ff103339028f0976
-
SSDEEP
1536:PpWC+8Pel2J2eNY7HgGZuaPUBlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:46PeleNY7H8BltOrWKDBr+yJb
Static task
static1
Behavioral task
behavioral1
Sample
041705860d9c5376885f8a086a52aac0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
041705860d9c5376885f8a086a52aac0.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
gozi
Targets
-
-
Target
041705860d9c5376885f8a086a52aac0.exe
-
Size
163KB
-
MD5
041705860d9c5376885f8a086a52aac0
-
SHA1
4111c4bededfb5413fc2e682988849319721a506
-
SHA256
cc4820ba1af789e7fb0143124e57a25aae166cdd32734d9c1e9adcd5ffce024b
-
SHA512
f16408c038fc0444c9bccff51a44aa9ee4b0855b5802eca1465fcec6dbd1587dc624f811f27bd008f5a1ad2aaaf67fb9ba135062dac45694ff103339028f0976
-
SSDEEP
1536:PpWC+8Pel2J2eNY7HgGZuaPUBlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:46PeleNY7H8BltOrWKDBr+yJb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-