General

  • Target

    c08d2826bf91b133010f50f95f3aa221fc8e37b99dd05e37770ec276e4e7ad31

  • Size

    364KB

  • Sample

    241022-c5dmassbpc

  • MD5

    ff5f5ba4b33b61d467e5a966a65b2ddf

  • SHA1

    fe1cb7f63947602a20afa3daab26fec7a8ad8fe5

  • SHA256

    c08d2826bf91b133010f50f95f3aa221fc8e37b99dd05e37770ec276e4e7ad31

  • SHA512

    8ab629a7c108f2f2eacd398ae48dc13806a1ded07be532d9fb911183ad5438ad1e1aac355c96c72cc0c91f90bb8c76258dd67cdadb68702ff6f038d59b27695d

  • SSDEEP

    1536:ozXF8CvrJ4PBhDP35r6hClProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:oh8k6DP3Z6hCltOrWKDBr+yJb

Malware Config

Extracted

Family

gozi

Targets

    • Target

      c08d2826bf91b133010f50f95f3aa221fc8e37b99dd05e37770ec276e4e7ad31

    • Size

      364KB

    • MD5

      ff5f5ba4b33b61d467e5a966a65b2ddf

    • SHA1

      fe1cb7f63947602a20afa3daab26fec7a8ad8fe5

    • SHA256

      c08d2826bf91b133010f50f95f3aa221fc8e37b99dd05e37770ec276e4e7ad31

    • SHA512

      8ab629a7c108f2f2eacd398ae48dc13806a1ded07be532d9fb911183ad5438ad1e1aac355c96c72cc0c91f90bb8c76258dd67cdadb68702ff6f038d59b27695d

    • SSDEEP

      1536:ozXF8CvrJ4PBhDP35r6hClProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:oh8k6DP3Z6hCltOrWKDBr+yJb

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

MITRE ATT&CK Enterprise v15

Tasks