Overview

overview

10

Static

static

1

setup.bin.exe

windows7_x64

10

setup.bin.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    setup.bin
  • Size 108KB
  • Sample200629-w2cesk2t4a
  • SHA256 3fe5fdbdc141727dc6b70a7c8e2c7700a0eef1ee6236d7a5cb62b15c75ab9f26
  • MD5 SHA1 SHA512
Score
10/10
gozi_ifsbbankertrojan

Malware Config

Targets

    • Target
      setup.bin
    • Size 108KB
    • SHA256 3fe5fdbdc141727dc6b70a7c8e2c7700a0eef1ee6236d7a5cb62b15c75ab9f26
    • MD5 SHA1 SHA512
    Score
    10/10
    bankertrojangozi_ifsb

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks