gozi_ifsb | b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89 | Triage™

Login
Reports

Overview

overview

Static

static

setup.exe

windows7_x64

setup.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
setup.exe
Size 202KB
Sample200716-ldsv853x9n
SHA256 b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89
MD5 e61cc4286dabaf6339a813da551e72fd
SHA1 a0e50a9d033a780c261ba35ce92acfa68fb33924
SHA512 890f8e957440aa9af5265084ab2d28f6902d0f3110f2fa1d6220eb2ab58fdd98eb39589e59136b793003da2dc62844b67db81954834c87341e0040d5fb0fc682
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7

windows7_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v200430

windows10_x64

0 signatures

0 seconds

banker trojan gozi_ifsb

Malware Config

Targets

- Target
  setup.exe
- Size 202KB
- SHA256 b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89
- MD5 e61cc4286dabaf6339a813da551e72fd
- SHA1 a0e50a9d033a780c261ba35ce92acfa68fb33924
- SHA512 890f8e957440aa9af5265084ab2d28f6902d0f3110f2fa1d6220eb2ab58fdd98eb39589e59136b793003da2dc62844b67db81954834c87341e0040d5fb0fc682
- MD5 SHA1 SHA512
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2026

Terms | Privacy