gozi_ifsb | f22c9740a5c5feb820a95a2c75ecdf6d5b6c2dc994e912203bcd8213bdac76f7 | Triage™

Login
Reports

Overview

overview

Static

static

709270059a...b1.exe

windows7_x64

709270059a...b1.exe

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
709270059a78269ddcba33a6011198b1.exe
Size 171KB
Sample201109-99drafe3rn
SHA256 f22c9740a5c5feb820a95a2c75ecdf6d5b6c2dc994e912203bcd8213bdac76f7
MD5 709270059a78269ddcba33a6011198b1
SHA1 083cd00c47ae095f2a58e975abfcc0597c193387
SHA512 1588582077f820c39c8cfac9d84b61ad1c7479aff6f9582799ec2e6bb40666b2da8ca36e476c6977e3052c86d034b437fb620cf193c4419d6076f99441ca48bf
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

709270059a78269ddcba33a6011198b1.exe

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Behavioral task

behavioral2

Sample

709270059a78269ddcba33a6011198b1.exe

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  709270059a78269ddcba33a6011198b1.exe
- Size 171KB
- SHA256 f22c9740a5c5feb820a95a2c75ecdf6d5b6c2dc994e912203bcd8213bdac76f7
- MD5 709270059a78269ddcba33a6011198b1
- SHA1 083cd00c47ae095f2a58e975abfcc0597c193387
- SHA512 1588582077f820c39c8cfac9d84b61ad1c7479aff6f9582799ec2e6bb40666b2da8ca36e476c6977e3052c86d034b437fb620cf193c4419d6076f99441ca48bf
- MD5 SHA1 SHA512
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan

© 2018-2026

Terms | Privacy