gozi_ifsb | e9875f1f3279e3bd42b36c071974d9108802919070fcb4a29218858895feb4d6 | Triage

Sharing

General

Target

setup.exe
Size

232KB
Sample

200708-vfdkj8qste
MD5

48473eec2873bc3cf04c33e93d27ced2
SHA1

acc49b5a5b5ba23d7c85772d3ca661ce2be97750
SHA256

e9875f1f3279e3bd42b36c071974d9108802919070fcb4a29218858895feb4d6
SHA512

f73f7453298776e9af3254d12eae4298bb7fc9611728d68cc089fdb8689a7ca2a79ff1dd4bd307bc9156f28933bf2bdeda4da3a3b36f19b8a5bc68bc8cdaa5e8

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  setup.exe
- Size
  
  232KB
- MD5
  
  48473eec2873bc3cf04c33e93d27ced2
- SHA1
  
  acc49b5a5b5ba23d7c85772d3ca661ce2be97750
- SHA256
  
  e9875f1f3279e3bd42b36c071974d9108802919070fcb4a29218858895feb4d6
- SHA512
  
  f73f7453298776e9af3254d12eae4298bb7fc9611728d68cc089fdb8689a7ca2a79ff1dd4bd307bc9156f28933bf2bdeda4da3a3b36f19b8a5bc68bc8cdaa5e8
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb