gozi_ifsb | fb6856b2e1967b9bebf8deb3f3ea2994cf437e6184d9dc99ee53c92c531d0e27 | Triage

Resubmissions

24-08-2021 14:41

210824-gbqdf47416 10

23-08-2021 18:15

210823-78r35g4gms 10

19-12-2020 05:48

201219-8fefrsq5f2 10

Analysis

max time kernel
328s
max time network
1441s
platform
windows10_x64
resource
win10v20210410
submitted
24-08-2021 14:41

Sharing

Report Analysis Logs

General

Target

37e185e2b05b3d448b2096d3b5d104fafce47991e6a7634340c1b28b2bee8028.exe
Size

539KB
MD5

10fda777cc56f004e90a4037e1e2cdcc
SHA1

2827b8e86f8eb6a2f07ed13d7e237eef5420e5e9
SHA256

37e185e2b05b3d448b2096d3b5d104fafce47991e6a7634340c1b28b2bee8028
SHA512

9a9c6af054c8bc6d53e44dcb1650b17409d2229d539272d73b86c001a04f775d78c543361c4d8d53204a4519899ca31a3e4db31e02503e17a561621dc15ff088

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Signatures

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

C:\Users\Admin\AppData\Local\Temp\37e185e2b05b3d448b2096d3b5d104fafce47991e6a7634340c1b28b2bee8028.exe
"C:\Users\Admin\AppData\Local\Temp\37e185e2b05b3d448b2096d3b5d104fafce47991e6a7634340c1b28b2bee8028.exe"
1⤵
PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2576-114-0x0000000000400000-0x0000000000493000-memory.dmp

Filesize
588KB

Download
memory/2576-116-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download