Extracted

• • Target

    KMSAuto Lite Portable v1.3.5.3/KMSAuto x64.exe

  • Size

    1.6MB

  • MD5

    91138712e5e691a39175f02f145681e6

  • SHA1

    43a00a96fa01e9d4b38b50694dc09ddc3e54939b

  • SHA256

    da87f54817fa427a78a3376e887013c8981e92e4394edaa210bc6557a6ca6930

  • SHA512

    fdb1b99c51ca5a4a3910c46a276d54833161e427d97a9f65b7ad3b4732b4f36fba90ff71f9895cf128f863c903f6ac15e82dd224277bf17ccc5003f2bd6d2ff3

  • SSDEEP

    49152:GG7X7Xfq0Xdqm66MzsNjGgnwuqL6DDf8T:9DjRdqm6LWKgne0s

  Score

  10^/10

  gozibankerisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2

• • Target

    KMSAuto Lite Portable v1.3.5.3/KMSAuto.exe

  • Size

    1.7MB

  • MD5

    9129cf390af59e8883c2ad2b441f0fc8

  • SHA1

    316945b06058ffccc032fb456c67064f69e8ded5

  • SHA256

    839e6f62f594bb48882c8b86ba1c950a1e68d02adf729f78550cbb01483be0ea

  • SHA512

    5fd1b5fb96506122f3f9b7effdeb6dab9726d7df3c3b4fdb6cfb6d6dbcb61683e8d048eb943dac4c20a2baaef984e5618ec4c7f2f033d092269c6d09927756cc

  • SSDEEP

    24576:/kJw8EIRYk40u443yE4lpWc2eNZkC3196UKtZh1QpoP+l1OwQsv+pG+97IiGAWcs:T8EIH40Y394XWgZkCcZbQjQpDu

  Score

  1^/10
  behavioral3behavioral4