Extracted

Extracted

• • Target

    45d3c7d1fb1ea66a66cd2895c30e8df398cf561314e1bcac2c429dc273817154

  • Size

    351KB

  • MD5

    a47ee973940ba634ced04939b927e556

  • SHA1

    31f361613a56e26ad3636cef4b51827e54df3c1d

  • SHA256

    45d3c7d1fb1ea66a66cd2895c30e8df398cf561314e1bcac2c429dc273817154

  • SHA512

    8f3e78b45d548b23a889a230062bbfd0e692f3b0eab341954d4a1a86432ff8768b0af14f0005280452d0837756ae628d46fe7ef4983dfc6dc6b464752f73010b

  • SSDEEP

    6144:ViceR0zXvZss0DYWQ9km7LWMCuMeGbfUTpYDDmu/+3fbZ:nzXvZ7p9hLWMCmG+pG/YZ

  Score

  10^/10

  goziramnit8585bankerdiscoveryisfbspywarestealertrojanupxworm

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Ramnit

    Ramnit is a versatile family that holds viruses, worms, and Trojans.

    trojanspywarestealerwormbankerramnit

  • Ramnit family

    ramnit

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2