gozi_ifsb | fb75efa8434d35a049d6608b6534df5c0716d33eb373f63cda5333796e16f1ec | Triage

Sharing

General

Target

9a59a4ce4aa2358b0482f13d0f53549a.dll
Size

225KB
Sample

200707-yxglkmm6fe
MD5

9a59a4ce4aa2358b0482f13d0f53549a
SHA1

ac51b90dc86d4338ebd113c9c11f8e96034f491f
SHA256

fb75efa8434d35a049d6608b6534df5c0716d33eb373f63cda5333796e16f1ec
SHA512

cce9b936f60edfa14cc7b6d697e9a71a5d29f6cc4f7ea4926acde4adbb0bb71806c8d06222ca7e5671bbfeadb1abfcb27f72ea08fc66582562ef7d17483423ae

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  9a59a4ce4aa2358b0482f13d0f53549a.dll
- Size
  
  225KB
- MD5
  
  9a59a4ce4aa2358b0482f13d0f53549a
- SHA1
  
  ac51b90dc86d4338ebd113c9c11f8e96034f491f
- SHA256
  
  fb75efa8434d35a049d6608b6534df5c0716d33eb373f63cda5333796e16f1ec
- SHA512
  
  cce9b936f60edfa14cc7b6d697e9a71a5d29f6cc4f7ea4926acde4adbb0bb71806c8d06222ca7e5671bbfeadb1abfcb27f72ea08fc66582562ef7d17483423ae
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb