Extracted

• • Target

    4eae1353dbeae131a25464acc5c3eca78f4a67c791ce5f12e3008a0db050b2a9

  • Size

    86KB

  • MD5

    a3297494b465b89a6d58e742ab4e8438

  • SHA1

    59e5d31799dc0bc7b70da92fefed93ce3d3c62c4

  • SHA256

    4eae1353dbeae131a25464acc5c3eca78f4a67c791ce5f12e3008a0db050b2a9

  • SHA512

    c3cd65db947f1cba0fb0f83584d4e082c327ac6a184486b999799ab3844530795eb3c3bf96c92bff1fdf09b82c0c1163ce61e3b2f2d2518e3c67bb36c536aab2

  • SSDEEP

    1536:1Fgj6MBlXQhVMWMpdhy0XDsN9vsJWb7lZbxcDxcqO0CmuJd4BXac6:1CmylXQryf5qsQbraDCqOBbd4In

  Score

  10^/10

  discoveryupxgozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2