General

  • Target

    2744-69-0x0000000006A00000-0x0000000007283000-memory.dmp

  • Size

    8.5MB

  • MD5

    132f3fa63619e033f0d4a3edef5b2881

  • SHA1

    03245bef60d805c52d9ba0ae7b4d0298977fa10f

  • SHA256

    61096a697287d66ad1e69cec5453d4e33990e23a27128c439a9d1db624db35dc

  • SHA512

    a2803e3b71bc1137d3dab74ff4e609d8a12e2499b234ee80a4ee4f72c5fa181e8f7d205e08d034b72b80bc04c39208b535239ebd850d51cb0481a67fda5ee1c7

  • SSDEEP

    98304:ot1e0paAJJZDlLWJQgJzt6d3Bzt6It1e0pa4JJZDlLWJQ3Bzt6RZDlLWJm:o5gRt6d3Jt6IZ3Jt6P

Score
10/10

Malware Config

Extracted

Family

gozi

Signatures

  • Amadey family
  • Gozi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2744-69-0x0000000006A00000-0x0000000007283000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections