General

  • Target

    9afb07eb16bc0334cfc773969bda1a226d6118c76de466aeb9a183a69de99b1fN

  • Size

    364KB

  • Sample

    241011-ymx4wavgpm

  • MD5

    556179af288a9591a9f355eec2fa4050

  • SHA1

    64610e54c8d1be926c66c237d0f4dae494045895

  • SHA256

    9afb07eb16bc0334cfc773969bda1a226d6118c76de466aeb9a183a69de99b1f

  • SHA512

    35b29b0030bc67fb375174058e9511615d6074a91a87498b4eb7a41c44715ac8fd0040a88ae3de05b7a133a0cad41bf40f965777afcc15284e07c53735dcdb32

  • SSDEEP

    1536:CzXF8CvrJ4PBhDP35n6h5lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Ch8k6DP396h5ltOrWKDBr+yJb

Malware Config

Extracted

Family

gozi

Targets

    • Target

      9afb07eb16bc0334cfc773969bda1a226d6118c76de466aeb9a183a69de99b1fN

    • Size

      364KB

    • MD5

      556179af288a9591a9f355eec2fa4050

    • SHA1

      64610e54c8d1be926c66c237d0f4dae494045895

    • SHA256

      9afb07eb16bc0334cfc773969bda1a226d6118c76de466aeb9a183a69de99b1f

    • SHA512

      35b29b0030bc67fb375174058e9511615d6074a91a87498b4eb7a41c44715ac8fd0040a88ae3de05b7a133a0cad41bf40f965777afcc15284e07c53735dcdb32

    • SSDEEP

      1536:CzXF8CvrJ4PBhDP35n6h5lProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:Ch8k6DP396h5ltOrWKDBr+yJb

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks