gozi_ifsb | b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89 | Triage

Submit
Reports

Overview

overview

Static

static

setup.exe

windows7_x64

setup.exe

windows10_x64

Sharing

General

Target

setup.exe
Size

202KB
Sample

200716-ldsv853x9n
MD5

e61cc4286dabaf6339a813da551e72fd
SHA1

a0e50a9d033a780c261ba35ce92acfa68fb33924
SHA256

b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89
SHA512

890f8e957440aa9af5265084ab2d28f6902d0f3110f2fa1d6220eb2ab58fdd98eb39589e59136b793003da2dc62844b67db81954834c87341e0040d5fb0fc682

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

setup.exe

Resource

win7

banker trojan gozi_ifsb

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

setup.exe

Resource

win10v200430

banker trojan gozi_ifsb

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  setup.exe
- Size
  
  202KB
- MD5
  
  e61cc4286dabaf6339a813da551e72fd
- SHA1
  
  a0e50a9d033a780c261ba35ce92acfa68fb33924
- SHA256
  
  b300c3c4a48e5237774425ca45878848b02b0f983b7f07d78486d3f9eaa0ea89
- SHA512
  
  890f8e957440aa9af5265084ab2d28f6902d0f3110f2fa1d6220eb2ab58fdd98eb39589e59136b793003da2dc62844b67db81954834c87341e0040d5fb0fc682
Score

10^/10

banker trojan gozi_ifsb
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bankertrojangozi_ifsb

behavioral2

bankertrojangozi_ifsb

© 2018-2024

Terms | Privacy