gozi_ifsb | 7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478 | Triage™

Login
Reports

Overview

overview

Static

static

xspcd1.dll

windows7_x64

1

xspcd1.dll

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
xspcd1
Size 465KB
Sample201203-457fcndwr2
SHA256 7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478
MD5 7c104281fed4b9d6e39f56cef9ed178b
SHA1 ad18e810016841dad044d32992396f0950848bbb
SHA512 ad803697a7fa58f30f26d82d7947a8110fdc1500ece7c02d95ef97962a497fed3fd3230e98e5ea69344ba65f4f2b48333b6498ba86b4b65d3ba8a0647c32d2fe
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

xspcd1.dll

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

xspcd1.dll

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  xspcd1
- Size 465KB
- SHA256 7ca733ebb2fc1c0fc99bb61736c8c5a2b619110ef0ce8119207157247ecee478
- MD5 7c104281fed4b9d6e39f56cef9ed178b
- SHA1 ad18e810016841dad044d32992396f0950848bbb
- SHA512 ad803697a7fa58f30f26d82d7947a8110fdc1500ece7c02d95ef97962a497fed3fd3230e98e5ea69344ba65f4f2b48333b6498ba86b4b65d3ba8a0647c32d2fe
- MD5 SHA1 SHA512
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

gozi_ifsbbankertrojan

© 2018-2026

Terms | Privacy