Overview

overview

10

Static

static

3

372d075e78...18.exe

windows7-x64

10

372d075e78...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    372d075e782b781587e1018171e435f2_JaffaCakes118

  • Size

    350KB

  • Sample

    241011-2m8r6axhqh

  • MD5

    372d075e782b781587e1018171e435f2

  • SHA1

    e1dabd0f750b26f603ba0af7ab2e486618e8cc56

  • SHA256

    760bacd8f9f7fe6cd701e510d21b768edd9d0805d4b82b332c849b0ba48456cc

  • SHA512

    98158591b132be39c4ab69f1c497a59a852b39be94cb2e788322936c774166024ab45457dc73debb60c018576ff7856ff2b97e3d6f1c2c22a1784bb9c4da1322

  • SSDEEP

    6144:RukiCIXQRFUPRLLHpsn4kI4JMWmaF0oc:R0vXqFMFHps4k9euz

Score
10/10
gozibankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Attributes
  • build

    217039

Targets

    • Target

      372d075e782b781587e1018171e435f2_JaffaCakes118

    • Size

      350KB

    • MD5

      372d075e782b781587e1018171e435f2

    • SHA1

      e1dabd0f750b26f603ba0af7ab2e486618e8cc56

    • SHA256

      760bacd8f9f7fe6cd701e510d21b768edd9d0805d4b82b332c849b0ba48456cc

    • SHA512

      98158591b132be39c4ab69f1c497a59a852b39be94cb2e788322936c774166024ab45457dc73debb60c018576ff7856ff2b97e3d6f1c2c22a1784bb9c4da1322

    • SSDEEP

      6144:RukiCIXQRFUPRLLHpsn4kI4JMWmaF0oc:R0vXqFMFHps4k9euz

    Score
    10/10
    gozibankerdiscoveryisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks