gozi_ifsb | 8116f086d5b222ea6d3ac385bbc8f3a88c19f920435e1ba274a1f46702ab10a2 | Triage

Submit
Reports

Overview

overview

Static

static

gozi (1).bin.dll

windows7_x64

gozi (1).bin.dll

windows10_x64

Sharing

General

Target

gozi (1).bin
Size

231KB
Sample

200707-gf8c15jd26
MD5

a23a634785b4c2aed3ceaf90290af0c8
SHA1

a528c660f15806c967eb66b4cc0ff5547ba32405
SHA256

8116f086d5b222ea6d3ac385bbc8f3a88c19f920435e1ba274a1f46702ab10a2
SHA512

62763456b8e252448b1f6dfc376c64514e212881bbf0f558722cea18883a916c5725c41b488d4b5df7ad4f584eb9ee47c1beb98ae5325e55da864ed5d2094222

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

gozi (1).bin.dll

Resource

win7v200430

banker trojan gozi_ifsb

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

gozi (1).bin.dll

Resource

win10

banker trojan gozi_ifsb

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  gozi (1).bin
- Size
  
  231KB
- MD5
  
  a23a634785b4c2aed3ceaf90290af0c8
- SHA1
  
  a528c660f15806c967eb66b4cc0ff5547ba32405
- SHA256
  
  8116f086d5b222ea6d3ac385bbc8f3a88c19f920435e1ba274a1f46702ab10a2
- SHA512
  
  62763456b8e252448b1f6dfc376c64514e212881bbf0f558722cea18883a916c5725c41b488d4b5df7ad4f584eb9ee47c1beb98ae5325e55da864ed5d2094222
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2025

Terms | Privacy