General
-
Target
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e
-
Size
163KB
-
Sample
240624-e9588a1blm
-
MD5
3d5e1fc74f989280ab542b2f854080a2
-
SHA1
bece7102ff25a9c07c766b554e131649080d0b33
-
SHA256
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e
-
SHA512
c3ec55e699d84a011647e3838f492ff9284fe4079c6b1d00979eb12e273c2fb4306efc1d0d843bf8a5737eda55b0e0e756b4539fcb9ebbc552b90a15c2fa0d52
-
SSDEEP
1536:POxWOHVFEvo4B8PsXp3aH4ylbM8vzlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:0WiVyv8PsXpiN7ltOrWKDBr+yJb
Static task
static1
Behavioral task
behavioral1
Sample
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
gozi
Targets
-
-
Target
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e
-
Size
163KB
-
MD5
3d5e1fc74f989280ab542b2f854080a2
-
SHA1
bece7102ff25a9c07c766b554e131649080d0b33
-
SHA256
f53bd411f9ec7e3a40376ef5f9d55f34f9e769feb0b99a4b4feca9b3b79cea5e
-
SHA512
c3ec55e699d84a011647e3838f492ff9284fe4079c6b1d00979eb12e273c2fb4306efc1d0d843bf8a5737eda55b0e0e756b4539fcb9ebbc552b90a15c2fa0d52
-
SSDEEP
1536:POxWOHVFEvo4B8PsXp3aH4ylbM8vzlProNVU4qNVUrk/9QbfBr+7GwKrPAsqNVU:0WiVyv8PsXpiN7ltOrWKDBr+yJb
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Detects executables built or packed with MPress PE compressor
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-