Overview

overview

10

Static

static

3

6114e009c4...18.exe

windows7-x64

10

6114e009c4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6114e009c42369ad7dcb6c090ffaf2e4_JaffaCakes118

  • Size

    350KB

  • Sample

    241020-jgbw5aydkp

  • MD5

    6114e009c42369ad7dcb6c090ffaf2e4

  • SHA1

    31e8af3e1cc33aea5e3c5bcd93418f68fba1266c

  • SHA256

    f2096c1e029df99c83b86d6798f545afa9b3c121ab5f8b9ced07bcc349a22230

  • SHA512

    c7f96f9b28aa096e710a2abf9786ae5578e086d0256226e7a0525da488911aafd0ea34161b05014d6ea19a8cf25f8dff4a148f56699406d9131f2b790f3d897d

  • SSDEEP

    6144:RukiCIXQRFUPRLLHpsn4k54JMWmaF0oc:R0vXqFMFHps4kGeuz

Score
10/10
gozibankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Attributes
  • build

    217039

Targets

    • Target

      6114e009c42369ad7dcb6c090ffaf2e4_JaffaCakes118

    • Size

      350KB

    • MD5

      6114e009c42369ad7dcb6c090ffaf2e4

    • SHA1

      31e8af3e1cc33aea5e3c5bcd93418f68fba1266c

    • SHA256

      f2096c1e029df99c83b86d6798f545afa9b3c121ab5f8b9ced07bcc349a22230

    • SHA512

      c7f96f9b28aa096e710a2abf9786ae5578e086d0256226e7a0525da488911aafd0ea34161b05014d6ea19a8cf25f8dff4a148f56699406d9131f2b790f3d897d

    • SSDEEP

      6144:RukiCIXQRFUPRLLHpsn4k54JMWmaF0oc:R0vXqFMFHps4kGeuz

    Score
    10/10
    gozibankerdiscoveryisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks