gozi_ifsb | 6ae6bcb973ee6aeed707e799a2ba68251d3b6794e39d272e1393d5344e2a7c3a | Triage

Sharing

General

Target

6ae6bcb973ee6aeed707e799a2ba68251d3b6794e39d272e1393d5344e2a7c3a
Size

243KB
Sample

220701-rmnrwafgfl
MD5

f20e4c13bb8b91267028b3ab84dfe29c
SHA1

82ff3e11d41a8b08852214445cdc8a2c7147230a
SHA256

6ae6bcb973ee6aeed707e799a2ba68251d3b6794e39d272e1393d5344e2a7c3a
SHA512

49c901957e18247c5eb5a89b5100148be9ca1c60b8020eaf6a0adf32c7be21e86e7d938f0bab116331cc7fd454aaf2d47c85075ad7fefbf124f4a1131fe12a71

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
214098

Targets

- Target
  
  6ae6bcb973ee6aeed707e799a2ba68251d3b6794e39d272e1393d5344e2a7c3a
- Size
  
  243KB
- MD5
  
  f20e4c13bb8b91267028b3ab84dfe29c
- SHA1
  
  82ff3e11d41a8b08852214445cdc8a2c7147230a
- SHA256
  
  6ae6bcb973ee6aeed707e799a2ba68251d3b6794e39d272e1393d5344e2a7c3a
- SHA512
  
  49c901957e18247c5eb5a89b5100148be9ca1c60b8020eaf6a0adf32c7be21e86e7d938f0bab116331cc7fd454aaf2d47c85075ad7fefbf124f4a1131fe12a71
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2