gozi | 368f53a5f397ba108c81293f648e2480_NeikiAnalytics[.]exe

General

Target

368f53a5f397ba108c81293f648e2480_NeikiAnalytics.exe
Size

80KB
MD5

368f53a5f397ba108c81293f648e2480
SHA1

77774a039399e5d5a9e184dbc7f1f4063cea54e9
SHA256

e4e25a90ab5dbb5ee3acf91c2545ea0cbda455110f0ca01a0fa4e36bc3b251be
SHA512

98914940b7c27d9ad3d06ff72082e5a08980735de612b4003717c1e9c11186d5b222f28b2f1c6205ce3698cff70006f637df2908d101f92304d298a410e8f1f9
SSDEEP

1536:+QuEfLuCnhMemdroxG2h3sdxuaoFpaLO7QRsc/8e373C90CmuJd4BXL:rJfKCTmdroxGA8t2paLW5erYBbd45

Score

10^/10

upx isfb gozi

Family

gozi

Gozi family
gozi
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
368f53a5f397ba108c81293f648e2480_NeikiAnalytics.exe