Description
Gozi ISFB is a well-known and widely distributed banking trojan.
con3cti0n.dll
General
Target
Size
Sample
con3cti0n.dll
190KB
201124-3b9kxkgyg6
Score
10 /10
MD5
SHA1
SHA256
SHA512
3a1ebc82a5c0c8eccc290f16d7082c9d
2d5b79b6fa18163032f1e6e073d8eba48f41fbcf
c4e6f5cfecd2f30e47b684e5e57a6a9c9b03853546959baaf39e5948b7c9e15b
d5f979eb9d40e1f960139a491cdb4b969d3b9be482cdc5cd2b55fb0e0872d352f25b188e0ca203167bde39bb1dd55e82fe03e5f747c32abc863065342d170d65
Malware Config
Targets
Target
MD5
Filesize
con3cti0n.dll
3a1ebc82a5c0c8eccc290f16d7082c9d
190KB
Score
10 /10
SHA1
SHA256
SHA512
2d5b79b6fa18163032f1e6e073d8eba48f41fbcf
c4e6f5cfecd2f30e47b684e5e57a6a9c9b03853546959baaf39e5948b7c9e15b
d5f979eb9d40e1f960139a491cdb4b969d3b9be482cdc5cd2b55fb0e0872d352f25b188e0ca203167bde39bb1dd55e82fe03e5f747c32abc863065342d170d65
Tags
Signatures
-
Gozi, Gozi IFSB
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks