gozi_ifsb | f646b963da9c039c682f75c76ab369956e63804aeea00561e448fb26ca5751d3 | Triage™

Login
Reports

Overview

overview

Static

static

setup.exe

windows7_x64

setup.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 175KB
Sample200708-9lpba7fbpx
SHA256 f646b963da9c039c682f75c76ab369956e63804aeea00561e448fb26ca5751d3
MD5 3529e89ea5d2b26bb7db4f786430a49f
SHA1 fe3c0b477ef39716ce63d6177ac531645a82237f
SHA512 db66c4f7c5fbb71af7ff4f8593d6279b65eb2c640eb1af7e5fec93acabf1f64582152292d8c6d6374419ccd7d3a424d14122927e531ed08645bd2ead21839d05
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v200430

windows10_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Malware Config

Targets

- Target
  setup.exe
- Size 175KB
- SHA256 f646b963da9c039c682f75c76ab369956e63804aeea00561e448fb26ca5751d3
- MD5 3529e89ea5d2b26bb7db4f786430a49f
- SHA1 fe3c0b477ef39716ce63d6177ac531645a82237f
- SHA512 db66c4f7c5fbb71af7ff4f8593d6279b65eb2c640eb1af7e5fec93acabf1f64582152292d8c6d6374419ccd7d3a424d14122927e531ed08645bd2ead21839d05
- MD5 SHA1 SHA512
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2026

Terms | Privacy