gozi_ifsb | 6a473e38f47d6ec7d3dcdcd4ccd8e1d8d9e388d1b8b169011bf89c273327d5a3 | Triage™

Login
Reports

Overview

overview

Static

static

setup.exe

windows7_x64

setup.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 256KB
Sample200624-khjde495nn
SHA256 6a473e38f47d6ec7d3dcdcd4ccd8e1d8d9e388d1b8b169011bf89c273327d5a3
MD5 dfcd34c53734e0a74661034d1018160e
SHA1 3590a0437a6484570b8c3a0e9e4c3846bcd1f00d
SHA512 4a23b2c9a654b98fa581d38deb2d62f436683ae17cca86614b24478672d43e2582a930b8c6ccb2623dc16ea32589953efac120fadf3bc43ed9ab497dd17e33a9
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7v200430

windows7_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10

windows10_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Malware Config

Targets

- Target
  setup.exe
- Size 256KB
- SHA256 6a473e38f47d6ec7d3dcdcd4ccd8e1d8d9e388d1b8b169011bf89c273327d5a3
- MD5 dfcd34c53734e0a74661034d1018160e
- SHA1 3590a0437a6484570b8c3a0e9e4c3846bcd1f00d
- SHA512 4a23b2c9a654b98fa581d38deb2d62f436683ae17cca86614b24478672d43e2582a930b8c6ccb2623dc16ea32589953efac120fadf3bc43ed9ab497dd17e33a9
- MD5 SHA1 SHA512
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2026

Terms | Privacy