gozi_ifsb | 2cc1c3bd97262adacd9db09f5f42c0e7203a64f5dc9701bef0affaa75c444bd1 | Triage

Sharing

General

Target

xspcd1.dll
Size

215KB
Sample

201203-swhjq1kmkj
MD5

d9750a24b16a6e1586f51692c2f25aef
SHA1

5f239376302476ad1b46cf4020a2c02a5ec2d516
SHA256

2cc1c3bd97262adacd9db09f5f42c0e7203a64f5dc9701bef0affaa75c444bd1
SHA512

414a5a710d6758857934e0bab53e76e2eaa53613b0e2ae4a0235203b2e527f9a563190dd2665d13d1fce7aad206fa6f9184fe6f8e2d79b3d11148e00cb4a4bac

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  xspcd1.dll
- Size
  
  215KB
- MD5
  
  d9750a24b16a6e1586f51692c2f25aef
- SHA1
  
  5f239376302476ad1b46cf4020a2c02a5ec2d516
- SHA256
  
  2cc1c3bd97262adacd9db09f5f42c0e7203a64f5dc9701bef0affaa75c444bd1
- SHA512
  
  414a5a710d6758857934e0bab53e76e2eaa53613b0e2ae4a0235203b2e527f9a563190dd2665d13d1fce7aad206fa6f9184fe6f8e2d79b3d11148e00cb4a4bac
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

gozi_ifsbbankertrojan