Overview

overview

10

Static

static

1

nazionale.bin.exe

windows7_x64

10

nazionale.bin.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    nazionale.bin
  • Size 224KB
  • Sample200814-a1h5d36f8j
  • SHA256 8e5d52727fd76e7fc3078c8bc3607e8d0fc2b4d9eaf09de824c59f2ed26b0f21
  • MD5 SHA1 SHA512
Score
10/10
gozi_ifsbbankertrojan

Malware Config

Targets

    • Target
      nazionale.bin
    • Size 224KB
    • SHA256 8e5d52727fd76e7fc3078c8bc3607e8d0fc2b4d9eaf09de824c59f2ed26b0f21
    • MD5 SHA1 SHA512
    Score
    10/10
    bankertrojangozi_ifsb

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks