gozi_ifsb | fc452a5bf717769b72f87b19a3690fda0f693c7ae14a01cdc829ba420c61163c | Triage

Submit
Reports

Overview

overview

Static

static

abd2641f8b...7d.exe

windows7_x64

abd2641f8b...7d.exe

windows10_x64

Sharing

General

Target

abd2641f8be570920b9b60f88a11b17d.exe
Size

162KB
Sample

200716-k3cnfb2sh2
MD5

abd2641f8be570920b9b60f88a11b17d
SHA1

3f52fd290c3d4cb01feb56a5bd212e00658e8835
SHA256

fc452a5bf717769b72f87b19a3690fda0f693c7ae14a01cdc829ba420c61163c
SHA512

a0cbb4b28303fdb7c9f48605c1b5315de8c8fb8834092a735f71a7482f71a985ac982b25b851d86d79f7ff0bdb89f2fc7d1faef4510f025374931c3a69ce2219

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

abd2641f8be570920b9b60f88a11b17d.exe

Resource

win7

banker trojan gozi_ifsb

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

abd2641f8be570920b9b60f88a11b17d.exe

Resource

win10

banker trojan gozi_ifsb

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  abd2641f8be570920b9b60f88a11b17d.exe
- Size
  
  162KB
- MD5
  
  abd2641f8be570920b9b60f88a11b17d
- SHA1
  
  3f52fd290c3d4cb01feb56a5bd212e00658e8835
- SHA256
  
  fc452a5bf717769b72f87b19a3690fda0f693c7ae14a01cdc829ba420c61163c
- SHA512
  
  a0cbb4b28303fdb7c9f48605c1b5315de8c8fb8834092a735f71a7482f71a985ac982b25b851d86d79f7ff0bdb89f2fc7d1faef4510f025374931c3a69ce2219
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2024

Terms | Privacy