Overview

overview

10

Static

static

3

973a4afe61...18.exe

windows7-x64

10

973a4afe61...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    973a4afe610f308841c89d3ba54c3486_JaffaCakes118

  • Size

    208KB

  • Sample

    241124-z3gbqswjfq

  • MD5

    973a4afe610f308841c89d3ba54c3486

  • SHA1

    3903878bb6c51c33681a693c128e5fe8872cdf3b

  • SHA256

    b717b795c1b809d8613992490d030b729d590a48e4f5e1233431ef3bce1b0d56

  • SHA512

    19a1f5dd3bb9c310b56239ed92551c57b0f201e99532cd77ca04d1d55022112eacfc1a84372f1781cc1f1beed212b5df9a2239cc2ec44a43a24b20c2db1f04ae

  • SSDEEP

    6144:X17R4t23DRTWadm4BpX8ntjv6s4amwMURgF/:z+cDRCadVpX8nt7cCQ/

Score
10/10
gozibankerdiscoveryisfbtrojan

Malware Config

Extracted

Family

gozi

Targets

    • Target

      973a4afe610f308841c89d3ba54c3486_JaffaCakes118

    • Size

      208KB

    • MD5

      973a4afe610f308841c89d3ba54c3486

    • SHA1

      3903878bb6c51c33681a693c128e5fe8872cdf3b

    • SHA256

      b717b795c1b809d8613992490d030b729d590a48e4f5e1233431ef3bce1b0d56

    • SHA512

      19a1f5dd3bb9c310b56239ed92551c57b0f201e99532cd77ca04d1d55022112eacfc1a84372f1781cc1f1beed212b5df9a2239cc2ec44a43a24b20c2db1f04ae

    • SSDEEP

      6144:X17R4t23DRTWadm4BpX8ntjv6s4amwMURgF/:z+cDRCadVpX8nt7cCQ/

    Score
    10/10
    gozibankerdiscoveryisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • Gozi family

      gozi

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks