gozi_ifsb | 7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478 | Triage

Sharing

General

Target

xspcd1
Size

465KB
Sample

201203-457fcndwr2
MD5

7c104281fed4b9d6e39f56cef9ed178b
SHA1

ad18e810016841dad044d32992396f0950848bbb
SHA256

7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478
SHA512

ad803697a7fa58f30f26d82d7947a8110fdc1500ece7c02d95ef97962a497fed3fd3230e98e5ea69344ba65f4f2b48333b6498ba86b4b65d3ba8a0647c32d2fe

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  xspcd1
- Size
  
  465KB
- MD5
  
  7c104281fed4b9d6e39f56cef9ed178b
- SHA1
  
  ad18e810016841dad044d32992396f0950848bbb
- SHA256
  
  7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478
- SHA512
  
  ad803697a7fa58f30f26d82d7947a8110fdc1500ece7c02d95ef97962a497fed3fd3230e98e5ea69344ba65f4f2b48333b6498ba86b4b65d3ba8a0647c32d2fe
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

gozi_ifsbbankertrojan