gozi_ifsb | 1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211 | Triage™

Login
Reports

Overview

overview

Static

static

5f044c8e2c2d0.dll

windows7_x64

5f044c8e2c2d0.dll

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
5f044c8e2c2d0.dll
Size 224KB
Sample200707-jkbvdkmd5e
SHA256 1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211
MD5 ec7c1f9960dae10f6c7970c54e7cfd88
SHA1 7a2eeacb8f8167647759a10d4686d92810d53024
SHA512 48c3399aee4db5a8655557c99e52248b043a19554449a524039cba3e4f54efea776c59d5f8eced41845f1d0fc643e00ea284bffc4cc6a93ab6ae9f2cafa94ce2
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

5f044c8e2c2d0.dll

Resource

win7

windows7_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Behavioral task

behavioral2

Sample

5f044c8e2c2d0.dll

Resource

win10

windows10_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Malware Config

Targets

- Target
  5f044c8e2c2d0.dll
- Size 224KB
- SHA256 1007538050a92f07d23ac2be6956f577fbfd459381415b40a3b53b794a6d5211
- MD5 ec7c1f9960dae10f6c7970c54e7cfd88
- SHA1 7a2eeacb8f8167647759a10d4686d92810d53024
- SHA512 48c3399aee4db5a8655557c99e52248b043a19554449a524039cba3e4f54efea776c59d5f8eced41845f1d0fc643e00ea284bffc4cc6a93ab6ae9f2cafa94ce2
- MD5 SHA1 SHA512
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2026

Terms | Privacy