Extracted

• • Target

    60ec9838522ebad66ab2ff8a9f95b46a1e2fcbfa69f2b3def374f02d588ce7c3

  • Size

    2.5MB

  • MD5

    0758c0a8e2bc20e97be44abf8807cc7b

  • SHA1

    2527e503520ae7f38370f9d72f83a80263556c72

  • SHA256

    60ec9838522ebad66ab2ff8a9f95b46a1e2fcbfa69f2b3def374f02d588ce7c3

  • SHA512

    2411c1ec1c30369cd52d09c0b7b6f64fa698b21d3ac34da5915d90e40c9e7b92dc22427662c373b06986991dae7fb631ab4eb6e7f021c5b717f11dc69c0978c9

  • SSDEEP

    49152:yDHRbmQanLWGS0V67X1KwwoWBJUP1jPcDibBUrvje5tfJ4kLlJa09oi+lnME:yDHRbmQyWPr1LMBWP1jPcDFeN1Llr95F

  Score

  10^/10

  gozibankerdiscoveryisfbtrojanupx

  • Gozi

    Gozi is a well-known and widely distributed banking trojan.

    bankertrojangozi

  • Gozi family

    gozi

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2