General

  • Target

    8bb295e525239cf2df5cd925c72b3776584685872d0d4453c5d5ca8f35a7ba5e

  • Size

    364KB

  • Sample

    241009-24ewea1arc

  • MD5

    af5e13403f2e5e5057c38d26284ba2f1

  • SHA1

    1d84ccbfec5ac7f4d36352f3f04e70a2daa512a9

  • SHA256

    8bb295e525239cf2df5cd925c72b3776584685872d0d4453c5d5ca8f35a7ba5e

  • SHA512

    8a5a39f5ffcb4bb6270ba792f17b0702faaf0b16d08c991ad92dd8669a2d303beeba9b51f796b91e7122beca37b2e9dd4ec9110406e0a25d215750af987829a0

  • SSDEEP

    1536:s9zXF8CvrJ4PBhDP35b6hmlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:s9h8k6DP3V6hmltOrWKDBr+yJb

Malware Config

Extracted

Family

gozi

Targets

    • Target

      8bb295e525239cf2df5cd925c72b3776584685872d0d4453c5d5ca8f35a7ba5e

    • Size

      364KB

    • MD5

      af5e13403f2e5e5057c38d26284ba2f1

    • SHA1

      1d84ccbfec5ac7f4d36352f3f04e70a2daa512a9

    • SHA256

      8bb295e525239cf2df5cd925c72b3776584685872d0d4453c5d5ca8f35a7ba5e

    • SHA512

      8a5a39f5ffcb4bb6270ba792f17b0702faaf0b16d08c991ad92dd8669a2d303beeba9b51f796b91e7122beca37b2e9dd4ec9110406e0a25d215750af987829a0

    • SSDEEP

      1536:s9zXF8CvrJ4PBhDP35b6hmlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:s9h8k6DP3V6hmltOrWKDBr+yJb

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks