gozi_ifsb | 2d9042e9844cfad13945bfd8480aefd9afbcca828998e6f65181b77cf93d7e33 | Triage

Sharing

General

Target

xspcd8.dll
Size

465KB
Sample

201203-vkrna2lke2
MD5

5e60c270f6cd1b2d21ef8c5e7c1955b0
SHA1

a39ad42617e713473b2bec4662d24b9ff315c9ae
SHA256

2d9042e9844cfad13945bfd8480aefd9afbcca828998e6f65181b77cf93d7e33
SHA512

44cbc550fe48ae8de739da6b60ff9238a5860ae39726b53e942e39e73d83c307640b29dcdc2468fb63e9f788200e12913d4996e2f42a03c1596dc46fb06599eb

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  xspcd8.dll
- Size
  
  465KB
- MD5
  
  5e60c270f6cd1b2d21ef8c5e7c1955b0
- SHA1
  
  a39ad42617e713473b2bec4662d24b9ff315c9ae
- SHA256
  
  2d9042e9844cfad13945bfd8480aefd9afbcca828998e6f65181b77cf93d7e33
- SHA512
  
  44cbc550fe48ae8de739da6b60ff9238a5860ae39726b53e942e39e73d83c307640b29dcdc2468fb63e9f788200e12913d4996e2f42a03c1596dc46fb06599eb
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2

gozi_ifsbbankertrojan