gozi_ifsb | d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770

Analysis

max time kernel
110s
max time network
125s
platform
windows10_x64
resource
win10-en-20210920
submitted
21-10-2021 18:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe
Size

162KB
MD5

fc00657a0e9c136b3381604e2510c9a4
SHA1

ac944c1863937b91c04f8d814a91ff31de442af5
SHA256

d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770
SHA512

96811bb08f82f0a9a11c23d77097a59d3e724d6f26c31b1ebbc74277e6f2506b065a97cb6fa12af5b0c485e6c2f2c9d72f8b8de008efc75a33310d6636d94584

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Signatures

Gozi, Gozi IFSB
Gozi ISFB is a well-known and widely distributed banking trojan.
banker trojan gozi_ifsb

Suspicious use of FindShellTrayWindow 2 IoCs

Processes:

d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe

pid	process
2216	d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe
2216	d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe

Suspicious use of SendNotifyMessage 2 IoCs

Processes:

d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe

pid	process
2216	d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe
2216	d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe

C:\Users\Admin\AppData\Local\Temp\d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe
"C:\Users\Admin\AppData\Local\Temp\d4b2377c5f9af91cc693fce967f3049ab4c6ec75c162276b584002946203a770.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2216-115-0x0000000002830000-0x0000000002859000-memory.dmp

Filesize
164KB

Download
memory/2216-116-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-117-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-118-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-119-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-121-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-122-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-120-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-124-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-123-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-125-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-127-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-126-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-128-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-129-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-130-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-131-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-132-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-133-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-135-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-134-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-136-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-137-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-138-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-139-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-140-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-141-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-142-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-144-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-145-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-146-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-143-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-147-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-148-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-149-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-150-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-151-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-153-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-154-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-155-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-156-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-157-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-158-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-159-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-160-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-161-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-162-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-163-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-164-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-165-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-166-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-167-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2216-169-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-168-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-171-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-172-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-173-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-174-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-175-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-176-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-177-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-178-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-179-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-170-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download
memory/2216-152-0x0000000000510000-0x000000000065A000-memory.dmp

Filesize
1.3MB

Download