Overview

overview

10

Static

static

3

anopka4.exe

windows7-x64

10

anopka4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd483a2ec807d5b070476a4f3aa69b00_JaffaCakes118

  • Size

    586KB

  • Sample

    240619-t2seqayanp

  • MD5

    bd483a2ec807d5b070476a4f3aa69b00

  • SHA1

    dc22aa4200413429055a03ddaf130056fa60b35b

  • SHA256

    79c2b97bae76b06154c8a4e35542439e88dba0acb2bbbeb932e0573acb5c20c9

  • SHA512

    c075b038946ba400f869ba7b2dc3ee0c093e67e6a9bf1868b5102566c1fc07400b0432595a32c719499886a9c3d375105ab2ce41460a4c78c6d99a98091ca974

  • SSDEEP

    12288:anWls4Lod/1z6+Jhq8WUyyACRa7cotkwmElwwEmKyB:t+/h0fyBgbmwEmKyB

Score
10/10
gozibankerisfbtrojan

Malware Config

Extracted

Family

gozi

Targets

    • Target

      anopka4.yarn

    • Size

      1003KB

    • MD5

      245dc39abf2c6aec5a14f7b7778bd562

    • SHA1

      b59c376b28c9c65123a2e94e8a22e4b0d604c0f2

    • SHA256

      9262dfd4bef2cac6c097b92a2df8deefdc56a53b7a24a9fd72bf978818c0e590

    • SHA512

      4cd440ecfc2e6ff080ff91edf7112b10a32620ef604aba281dd4ddca14ebc772e5720ec1efc9fde9e4b5d8875d76a08a33254cb9747562ffbfb270fd3895b32e

    • SSDEEP

      12288:X3wS4ZBG9rlLbdh5Qx9XNsjpaM1RJFbH7GsqgMMrzEYWNvlQ+5s8UgxyYPILEX0T:wSph5g2oo/FOlZRNk8JxysILguIZ

    Score
    10/10
    gozibankerisfbtrojan

    • Gozi

      Gozi is a well-known and widely distributed banking trojan.

      bankertrojangozi
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks