Extracted

• • Target

    c945f1e7ba31a76164e21117af7a571ebe360136da0a9f04de9750c7878f66e5N.exe

  • Size

    4.9MB

  • MD5

    88555484edeb20092019b07f13353740

  • SHA1

    5ee996e388654d904b61a7fef8c687c2b9046c19

  • SHA256

    c945f1e7ba31a76164e21117af7a571ebe360136da0a9f04de9750c7878f66e5

  • SHA512

    85fa27f4e9017c2ac2c01f63a39c2dfb3f1330053f5e5409ef2965c3a708a5cca6d1353d81184b0ca47eb208ff1f082cba289699b59cb6d5dc1e82401b939329

  • SSDEEP

    98304:Db7A9aMnac9OyZ8DpCQdGWR+O/4vAXjU2lSBjlYh2grFZyNgnRC2b/BzM0DjGrCH:TRyEbgpR9ySBjGBkiR/P6O8neO3o

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2