gozi_ifsb | f85a1e8275af4b754d2bcdf0e17c527443c7fe2e805163ba224732558616309f | Triage

Sharing

General

Target

setup.bin
Size

165KB
Sample

200714-htczm5sgw2
MD5

ca154b474ba898089df4fa110aefdd4a
SHA1

30ee1d7869675b491812932fd8c029d5b7531253
SHA256

f85a1e8275af4b754d2bcdf0e17c527443c7fe2e805163ba224732558616309f
SHA512

fd9e783924969f9e759064e0eee22b4bf3600b40dd0246a30037b1f2dfd60c4aa0be6b129adbe9ef8d83c4f99fb38344a5ffd8ef196d977f4854437ee0cf812c

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  setup.bin
- Size
  
  165KB
- MD5
  
  ca154b474ba898089df4fa110aefdd4a
- SHA1
  
  30ee1d7869675b491812932fd8c029d5b7531253
- SHA256
  
  f85a1e8275af4b754d2bcdf0e17c527443c7fe2e805163ba224732558616309f
- SHA512
  
  fd9e783924969f9e759064e0eee22b4bf3600b40dd0246a30037b1f2dfd60c4aa0be6b129adbe9ef8d83c4f99fb38344a5ffd8ef196d977f4854437ee0cf812c
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb