General

  • Target

    test2.sh

  • Size

    3.7MB

  • Sample

    241006-px85fsyerh

  • MD5

    0f69cb84465fd3497e20c6a8a11ba8f5

  • SHA1

    fb0f676afc4efa6cad3b33e3fed7b311257039a6

  • SHA256

    bb48e21f6cf72207b4e0ac0e1de5ad391527d1e808bc754c735de3859f95eee9

  • SHA512

    6fe3f82fa7589de52fae1a3e4fe44c9b1fea670b97dd9357b4f16ec00dbc2c2f91e4c88273561b46a3324cd3ab470dd62bd95b6f3b372951d8c3de01d903e460

  • SSDEEP

    98304:ear2rXY4T7I5KOHnkFiiWRSFJF0GoJoeU5Gyjb9kP/icx:/OY4PcKwnkF2UJuJoeU5Gy3q3t

Malware Config

Extracted

Family

gozi

Targets

    • Target

      test2.sh

    • Size

      3.7MB

    • MD5

      0f69cb84465fd3497e20c6a8a11ba8f5

    • SHA1

      fb0f676afc4efa6cad3b33e3fed7b311257039a6

    • SHA256

      bb48e21f6cf72207b4e0ac0e1de5ad391527d1e808bc754c735de3859f95eee9

    • SHA512

      6fe3f82fa7589de52fae1a3e4fe44c9b1fea670b97dd9357b4f16ec00dbc2c2f91e4c88273561b46a3324cd3ab470dd62bd95b6f3b372951d8c3de01d903e460

    • SSDEEP

      98304:ear2rXY4T7I5KOHnkFiiWRSFJF0GoJoeU5Gyjb9kP/icx:/OY4PcKwnkF2UJuJoeU5Gy3q3t

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks