gozi | 15222d87330961e6a70df75629a0bc113d4213a194da66777760a98e38f6efdf | Triage

Sharing

General

Target

15222d87330961e6a70df75629a0bc113d4213a194da66777760a98e38f6efdf
Size

6.5MB
Sample

240909-v85t3a1cmj
MD5

5d8fdb63b76be14cc7e9a4fb5ddf61f0
SHA1

9cb56bd90827eefb90116b0e0d0f97230902ee21
SHA256

15222d87330961e6a70df75629a0bc113d4213a194da66777760a98e38f6efdf
SHA512

e31957cb4c3d21132c0667d9a9e40322b4f31995a93c580527f5f7651a4d696908d116d90afec0ef6248ff3d47b6b4e9f11f9e04ef0188a4f0d6f780dd7f4db1
SSDEEP

49152:sxjJMbGoxRaA4BDqAd1QfUOwwUORWkZslV2aV2VN9o5EcV4eA:41oGoEBDqKQf7UORWkZ8BV2q5p

Score

10^/10

gozi discovery isfb

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  15222d87330961e6a70df75629a0bc113d4213a194da66777760a98e38f6efdf
- Size
  
  6.5MB
- MD5
  
  5d8fdb63b76be14cc7e9a4fb5ddf61f0
- SHA1
  
  9cb56bd90827eefb90116b0e0d0f97230902ee21
- SHA256
  
  15222d87330961e6a70df75629a0bc113d4213a194da66777760a98e38f6efdf
- SHA512
  
  e31957cb4c3d21132c0667d9a9e40322b4f31995a93c580527f5f7651a4d696908d116d90afec0ef6248ff3d47b6b4e9f11f9e04ef0188a4f0d6f780dd7f4db1
- SSDEEP
  
  49152:sxjJMbGoxRaA4BDqAd1QfUOwwUORWkZslV2aV2VN9o5EcV4eA:41oGoEBDqKQf7UORWkZ8BV2q5p
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2