gozi | ef73952702d81d9599d64e7980834cd6becf3d7d8f8bd3b51bca94e8049b599d

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
26-07-2024 06:50

Target

ef73952702d81d9599d64e7980834cd6becf3d7d8f8bd3b51bca94e8049b599d.dll
Size

425KB
MD5

740b5d37417003708e0f273733535c01
SHA1

b3ce8cc6a34f92cc41450c33ef448c667aaa15a8
SHA256

ef73952702d81d9599d64e7980834cd6becf3d7d8f8bd3b51bca94e8049b599d
SHA512

b081f0525cd82fef7aeb9f79c1569cff01771e506103c59178cc68d715f8813ff2f0d1910116ddb84e27007b2a8a0eeb452078ff06edb10c5924cfae82766191
SSDEEP

6144:9I34yb5apnrPnPQgY1INa6shJYP62aHYoa4AhdNorGvHdbi09GJwhO:9IIyNIr0ml2JY/aHYo7AHhly

Score

10^/10

gozi banker trojan

Gozi
Gozi is a well-known and widely distributed banking trojan.
banker trojan gozi

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ef73952702d81d9599d64e7980834cd6becf3d7d8f8bd3b51bca94e8049b599d.dll,#1
1⤵
PID:2552