fd11e035295639b19dfe418514c91159b3f50ea8dc350c36b63a9363e52f4533

General
Target

fd11e035295639b19dfe418514c91159b3f50ea8dc350c36b63a9363e52f4533

Size

468KB

Sample

211021-xjf6hsbegp

Score
10 /10
MD5

87aee37bf3a439092a819a1f3bb189e8

SHA1

d1d24a16f7dde7dfe78800e9dd82ff9f39d58dcf

SHA256

fd11e035295639b19dfe418514c91159b3f50ea8dc350c36b63a9363e52f4533

SHA512

3dfdaef3d7e6ec5fbc11917d5a09ea7492ac95692b976c695ac3adb074fe1705d9cc3bcfcfccdaf42335751f52ec3d1c41a190977e7463dcc2b0eb32d73376fe

Malware Config
Targets
Target

fd11e035295639b19dfe418514c91159b3f50ea8dc350c36b63a9363e52f4533

MD5

87aee37bf3a439092a819a1f3bb189e8

Filesize

468KB

Score
10 /10
SHA1

d1d24a16f7dde7dfe78800e9dd82ff9f39d58dcf

SHA256

fd11e035295639b19dfe418514c91159b3f50ea8dc350c36b63a9363e52f4533

SHA512

3dfdaef3d7e6ec5fbc11917d5a09ea7492ac95692b976c695ac3adb074fe1705d9cc3bcfcfccdaf42335751f52ec3d1c41a190977e7463dcc2b0eb32d73376fe

Tags

Signatures

  • Gozi, Gozi IFSB

    Description

    Gozi ISFB is a well-known and widely distributed banking trojan.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10