gozi_ifsb | fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004 | Triage

Sharing

General

Target

fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004
Size

288KB
Sample

210513-3ry458a9q6
MD5

119e87bcf548d2c87e08f3785a46d12a
SHA1

f36c4c87b3cdc1c6b8ee1a5389e3b3634729aa2b
SHA256

fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004
SHA512

170d0e0c0c2b33771d56eedeedb8efe96a29c332c13580f374b7a8d888d6320857626e5b80fba10125c45d2d5c29b87a9313c66a69a3cdeb4f92f460a2f502ce

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
217173
exe_type
loader

Targets

- Target
  
  fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004
- Size
  
  288KB
- MD5
  
  119e87bcf548d2c87e08f3785a46d12a
- SHA1
  
  f36c4c87b3cdc1c6b8ee1a5389e3b3634729aa2b
- SHA256
  
  fbb64e3ae33dd18c9fa9e58b83c23a9ecb2256c8ba510d321d292f2041da7004
- SHA512
  
  170d0e0c0c2b33771d56eedeedb8efe96a29c332c13580f374b7a8d888d6320857626e5b80fba10125c45d2d5c29b87a9313c66a69a3cdeb4f92f460a2f502ce
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan