gozi_ifsb | 1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211 | Triage

Submit
Reports

Overview

overview

Static

static

5f044c8e2c2d0.dll

windows7_x64

5f044c8e2c2d0.dll

windows10_x64

Sharing

General

Target

5f044c8e2c2d0.dll
Size

224KB
Sample

200707-jkbvdkmd5e
MD5

ec7c1f9960dae10f6c7970c54e7cfd88
SHA1

7a2eeacb8f8167647759a10d4686d92810d53024
SHA256

1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211
SHA512

48c3399aee4db5a8655557c99e52248b043a19554449a524039cba3e4f54efea776c59d5f8eced41845f1d0fc643e00ea284bffc4cc6a93ab6ae9f2cafa94ce2

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

5f044c8e2c2d0.dll

Resource

win7

banker trojan gozi_ifsb

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

5f044c8e2c2d0.dll

Resource

win10

banker trojan gozi_ifsb

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  5f044c8e2c2d0.dll
- Size
  
  224KB
- MD5
  
  ec7c1f9960dae10f6c7970c54e7cfd88
- SHA1
  
  7a2eeacb8f8167647759a10d4686d92810d53024
- SHA256
  
  1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211
- SHA512
  
  48c3399aee4db5a8655557c99e52248b043a19554449a524039cba3e4f54efea776c59d5f8eced41845f1d0fc643e00ea284bffc4cc6a93ab6ae9f2cafa94ce2
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2024

Terms | Privacy