gozi_ifsb | dc0df8f5ee0e898e069643a84cbc8154d6191f081665e245f1a9e2085028062f | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

tze6.dll

windows7_x64

1

tze6.dll

windows10_x64

Sharing

General

Target

tze6
Size

226KB
Sample

200708-ez2mhjwzs2
MD5

62388b78d8d816541a34fde46c87f14c
SHA1

ce64205ccda14e8f26e2c030418afce5542a1a88
SHA256

dc0df8f5ee0e898e069643a84cbc8154d6191f081665e245f1a9e2085028062f
SHA512

5bdeefd54b3b7dc472717b597563e72742c60182d48d347798ff4fdd5609eba83082cf0ac239ff4527096bf027fc1202adb19f91cd0cecd4681ab460be2b9fd7

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

tze6.dll

Resource

win7

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

tze6.dll

Resource

win10v200430

banker trojan gozi_ifsb

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  tze6
- Size
  
  226KB
- MD5
  
  62388b78d8d816541a34fde46c87f14c
- SHA1
  
  ce64205ccda14e8f26e2c030418afce5542a1a88
- SHA256
  
  dc0df8f5ee0e898e069643a84cbc8154d6191f081665e245f1a9e2085028062f
- SHA512
  
  5bdeefd54b3b7dc472717b597563e72742c60182d48d347798ff4fdd5609eba83082cf0ac239ff4527096bf027fc1202adb19f91cd0cecd4681ab460be2b9fd7
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

bankertrojangozi_ifsb

© 2018-2025

Terms | Privacy