gozi_ifsb | 31ace401668e11cf7874612cc2ce412dcb2ea96428e14f55364cde9214826023 | Triage

Sharing

General

Target

xspcd10.dll
Size

215KB
Sample

201203-1fdylqhncx
MD5

6dc320da82bfe9f897cd02fcd83c5d9b
SHA1

6ef252db67b1a0fe9b28c01cc6b7206fcb94a731
SHA256

31ace401668e11cf7874612cc2ce412dcb2ea96428e14f55364cde9214826023
SHA512

d9fea48b54e65439c650c9fa9ce3d70a485ba541710d160ff0dbdba5d21f1c7d22f89bd2bd0fe8fd247ad50da0ed9c452f3abd77aa9e86f580d359fa9cef65e6

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  xspcd10.dll
- Size
  
  215KB
- MD5
  
  6dc320da82bfe9f897cd02fcd83c5d9b
- SHA1
  
  6ef252db67b1a0fe9b28c01cc6b7206fcb94a731
- SHA256
  
  31ace401668e11cf7874612cc2ce412dcb2ea96428e14f55364cde9214826023
- SHA512
  
  d9fea48b54e65439c650c9fa9ce3d70a485ba541710d160ff0dbdba5d21f1c7d22f89bd2bd0fe8fd247ad50da0ed9c452f3abd77aa9e86f580d359fa9cef65e6
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

gozi_ifsbbankertrojan