General
-
Target
e30278a17c8ee448e92cc2c0739b7be76260a2cd439815ee371fa49c55cd2116
-
Size
2.5MB
-
MD5
fd2c6ba6f0a70ec9c3bf8693f093eec7
-
SHA1
3b76b6eb0fcbc87eeee3a67b0c06385a214763cd
-
SHA256
e30278a17c8ee448e92cc2c0739b7be76260a2cd439815ee371fa49c55cd2116
-
SHA512
5622c5f9cf31379de091c5b33363bc1736105a174c1aaa26a8dac9dc4af3401483c09094204ba1dc9a9ae436dc8bd8e04e1c7bc9ef5d4b0003d74ad39512794f
-
SSDEEP
49152:jVVo/bpdPODPJScFPW0fveOWh0Y6wo4Y9VxREGkXTzpTfQXtYKqQR3z:pCbDPUZs0fWOaEwo77E5XaXtYKqQR3
Score
10/10
Malware Config
Extracted
Family
gozi
Signatures
-
Gozi family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e30278a17c8ee448e92cc2c0739b7be76260a2cd439815ee371fa49c55cd2116
Headers
Sections