Overview

overview

10

Static

static

3

Loader(dnd...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Loaderdnd.zip

  • Size

    11.8MB

  • Sample

    241214-yml2lssmay

  • MD5

    79ba17d9b9d66536a253cbefccb27323

  • SHA1

    efc458af0ff75dde89f7c008c3402da7964f72c5

  • SHA256

    e0858a95e748d96789bb15229e788edeb875ff23cde24ecf769d46a9dd5def61

  • SHA512

    44ce577f3ebf2f085cb0387cfe0d1bdb31a1ecd9b2b824247b64350825ad258d1827e4043b3bc13db140818ce0fd57d22c140b9a97354b2268376f99ee932ae2

  • SSDEEP

    196608:T5z/AR30zyMnHK/c+uPnNKErAeHFb1BiFPPvGXZdmkFwzb0iN1MlQbut+KPkVMQq:dLAiyMHMOnNKeAeBOXGX7mAwMiN1StlB

Score
10/10
gozibankerisfbtrojan

Malware Config

Extracted

Family

gozi

Targets

    • Target

      Loader(dnd)/Loader.exe

    • Size

      13.1MB

    • MD5

      048ac9cef1a2a0770e626f0ec9634df3

    • SHA1

      d14330ff37a2827043bbc40c50bc19879103dbe1

    • SHA256

      7c407b3c332035c19d6c08780fcf04017d9ad9f05b6ed06047d5341eca9201fe

    • SHA512

      7139e333f49db124a84d485b667e4a6ab3ad44e56b5c5e92c9fb1f1aae45673ba8cfa45b1e7610dc9db643966b5ff11551c4866775877144c22b3735f4832ece

    • SSDEEP

      196608:FUqGuGYdgOh3Ej4y2JnnouxSEFxlRhWNXZXEXp9g0FQ1RCzuLpJG5QDp:BGuPdgOhkWnnoQSEdM1EXTgQQ1Qz80K

    Score
    10/10
    gozibankerisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi

    • Gozi family

      gozi

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Matrix

Tasks