Extracted

• • Target

    41f5338ab7665fd97eee000f1e121c7638913b5f0686e43121cc2c28e6b0ade3.exe

  • Size

    9.4MB

  • MD5

    e0b8b9c15f6c0b1388373e3e91942d8d

  • SHA1

    7bcacdbee55c3eea556d2aa79f04377344a54e47

  • SHA256

    41f5338ab7665fd97eee000f1e121c7638913b5f0686e43121cc2c28e6b0ade3

  • SHA512

    f1bd73c5f225243ac914054e6ac5ea01c3e9fbe1589ce1d93084c40e0e11c0e35f93c46dec8d270ac44520bac19fd008bd752446427433549bb604c163614e08

  • SSDEEP

    98304:udv7AIFM+IJkXHJKZno3XzJ9ktJUs71Saxfz7w3YV:gEIFM+IGXHo+TJ9EBz7w3YV

  Score

  10^/10

  gozibankerisfbtrojan

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2