gozi_ifsb | 92df4c929fde89abd9aca880f6e942e432853e5e8db64ffe4c19929ff4e2342f | Triage

Sharing

General

Target

bac6b7118aa1f9c9fe229393a7fcdb26.dll
Size

133KB
Sample

210505-tq1lflds7j
MD5

bac6b7118aa1f9c9fe229393a7fcdb26
SHA1

e3bb8b1bad2f17bf48d7b3b5675e404f64b9e7cf
SHA256

92df4c929fde89abd9aca880f6e942e432853e5e8db64ffe4c19929ff4e2342f
SHA512

582cb7fe2f299dc67cbcac14621e6ee40a047367a9b53a10d7765b68b1af863df58ca2324424d1f6baa3b4007a42fed67459fa5fdca0abb56d98dfbef6ecf1b5

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
250187
exe_type
loader

rsa_pubkey.base64

Targets

- Target
  
  bac6b7118aa1f9c9fe229393a7fcdb26.dll
- Size
  
  133KB
- MD5
  
  bac6b7118aa1f9c9fe229393a7fcdb26
- SHA1
  
  e3bb8b1bad2f17bf48d7b3b5675e404f64b9e7cf
- SHA256
  
  92df4c929fde89abd9aca880f6e942e432853e5e8db64ffe4c19929ff4e2342f
- SHA512
  
  582cb7fe2f299dc67cbcac14621e6ee40a047367a9b53a10d7765b68b1af863df58ca2324424d1f6baa3b4007a42fed67459fa5fdca0abb56d98dfbef6ecf1b5
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan