gozi_ifsb | 12e858bb6b8b20d96563324b69e77e03dfe3255332dbb32e79d94f7863bb0f8b | Triage™

Login
Reports

Overview

overview

Static

static

con3cti0n.dll

windows7_x64

con3cti0n.dll

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
con3cti0n.dll
Size 206KB
Sample201130-lmvmkdrr4a
SHA256 12e858bb6b8b20d96563324b69e77e03dfe3255332dbb32e79d94f7863bb0f8b
MD5 23246d384883f7e9e2488e9380ae596b
SHA1 70c916d64e4cdfdc025052456789b58eb6ecea64
SHA512 f9ba5af048820031fea74698924f2164cc1e16e057fd46e82cbce54fb4e981fe02959fbd7d23909cb92ffc551de81ffeb312fd681534fb39b42ebd0cdb4e75c0
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

con3cti0n.dll

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Behavioral task

behavioral2

Sample

con3cti0n.dll

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  con3cti0n.dll
- Size 206KB
- SHA256 12e858bb6b8b20d96563324b69e77e03dfe3255332dbb32e79d94f7863bb0f8b
- MD5 23246d384883f7e9e2488e9380ae596b
- SHA1 70c916d64e4cdfdc025052456789b58eb6ecea64
- SHA512 f9ba5af048820031fea74698924f2164cc1e16e057fd46e82cbce54fb4e981fe02959fbd7d23909cb92ffc551de81ffeb312fd681534fb39b42ebd0cdb4e75c0
- MD5 SHA1 SHA512
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan

© 2018-2026

Terms | Privacy