Overview

overview

10

Static

static

3fd65bd55e...76.exe

windows7_x64

10

3fd65bd55e...76.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3fd65bd55e4dadbf079c6a533941135b0ddf217dea16eec6ebc33f2098ea6276

  • Size

    720KB

  • Sample

    220630-xcrnnsgdcr

  • MD5

    5b882d515e43454b747846b57bbecd80

  • SHA1

    982d7e6b734aed22471513907f49306b6a75a4c4

  • SHA256

    3fd65bd55e4dadbf079c6a533941135b0ddf217dea16eec6ebc33f2098ea6276

  • SHA512

    761fcc0a7d88e52a62d87a86a02dd66f2a01563589425146bcd6eaef1af823561df34dbf098356f5fc2eef2dc36d3e0f8bf8e8674114d994284b32048562a004

Score
10/10
gozi_ifsbbankertrojan

Malware Config

Targets

    • Target

      3fd65bd55e4dadbf079c6a533941135b0ddf217dea16eec6ebc33f2098ea6276

    • Size

      720KB

    • MD5

      5b882d515e43454b747846b57bbecd80

    • SHA1

      982d7e6b734aed22471513907f49306b6a75a4c4

    • SHA256

      3fd65bd55e4dadbf079c6a533941135b0ddf217dea16eec6ebc33f2098ea6276

    • SHA512

      761fcc0a7d88e52a62d87a86a02dd66f2a01563589425146bcd6eaef1af823561df34dbf098356f5fc2eef2dc36d3e0f8bf8e8674114d994284b32048562a004

    Score
    10/10
    gozi_ifsbbankertrojan

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks