General

  • Target

    5b2ca923f31d7c91e99c34379d67adb646f8da8550b63fa03bcb6506f01698a1

  • Size

    364KB

  • Sample

    241021-172nxasbjm

  • MD5

    5fd969b758b82ad5e841b9af5bddbbd9

  • SHA1

    267926d8d2c41093d452d462c2f44d39e57c5dcc

  • SHA256

    5b2ca923f31d7c91e99c34379d67adb646f8da8550b63fa03bcb6506f01698a1

  • SHA512

    8e9b607115a95c9e5a1da0e57128538fbcfe228a74c1d82fe5103ee76678708b7d821af673c8c98c020de34200d88d04a35a8864be495d4088192f709d0270c3

  • SSDEEP

    1536:ypT1zXF8CvrJ4PBhDP35j6hbNlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:UT1h8k6DP3J6hZltOrWKDBr+yJb

Malware Config

Extracted

Family

gozi

Targets

    • Target

      5b2ca923f31d7c91e99c34379d67adb646f8da8550b63fa03bcb6506f01698a1

    • Size

      364KB

    • MD5

      5fd969b758b82ad5e841b9af5bddbbd9

    • SHA1

      267926d8d2c41093d452d462c2f44d39e57c5dcc

    • SHA256

      5b2ca923f31d7c91e99c34379d67adb646f8da8550b63fa03bcb6506f01698a1

    • SHA512

      8e9b607115a95c9e5a1da0e57128538fbcfe228a74c1d82fe5103ee76678708b7d821af673c8c98c020de34200d88d04a35a8864be495d4088192f709d0270c3

    • SSDEEP

      1536:ypT1zXF8CvrJ4PBhDP35j6hbNlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:UT1h8k6DP3J6hZltOrWKDBr+yJb

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks