Overview

overview

10

Static

static

importante.bin.dll

windows7_x64

1

importante.bin.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    importante.bin
  • Size 149KB
  • Sample201001-eydck7yab6
  • SHA256 1266fa18e0ae0fa01e2cf72e9055c62ccb1712ee52f94ec80d26ce27196e6897
  • MD5 SHA1 SHA512
Score
10/10
gozi_ifsbbankertrojan

Malware Config

Targets

    • Target
      importante.bin
    • Size 149KB
    • SHA256 1266fa18e0ae0fa01e2cf72e9055c62ccb1712ee52f94ec80d26ce27196e6897
    • MD5 SHA1 SHA512
    Score
    10/10
    bankertrojangozi_ifsb

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • Blacklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks