Extracted

• • Target

    I5w0SN

  • Size

    504B

  • MD5

    46bacc095e419a61d8594200d6fa96e5

  • SHA1

    2128d5085054537e0a1d449e61ce7839ba10bfb8

  • SHA256

    3a47ced8750d0151513ce5e28874274d5bcf7b2d81ca5872f8ea5cbd510681f8

  • SHA512

    2e3d94f03577895f423d6afe0718dc9e6b1a17617fcc02fd1299975f8d3ae25288fb9920e8ed8e7f2cc5468795c019454d743558c1819d8c1d2ed2678351c3e5

  Score

  10^/10

  gozibankerdiscoveryisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1