Overview

overview

10

Static

static

10

ceebb8371b...e0.exe

windows7-x64

10

ceebb8371b...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ceebb8371b6b4b30c8b5db9f5ddcea2c515614407ea1867094f451e7dc0dabe0

  • Size

    270KB

  • Sample

    221010-3qzjbsefam

  • MD5

    6e3b5808da36756e12da95cd5d0cd5b0

  • SHA1

    363d9e144cedb393b402ded6fb035474434369f4

  • SHA256

    ceebb8371b6b4b30c8b5db9f5ddcea2c515614407ea1867094f451e7dc0dabe0

  • SHA512

    ddc7124f09d719f2a6d6408e372985b010fe9d88ec1055c0fc82a292a995385a27a7b23e028c737aea038379d7546976d195e7948ef4c43dbc61466ce0a258c2

  • SSDEEP

    6144:8IL6ZTPzXDcku3Erl7KPV9AYmJh/kMsZfZumRMnWyXkEgr6CeA:8IL6ZTPjDxuolKdU/IZwmaWog2VA

Score
10/10
gozi_ifsbbankertrojanupx

Malware Config

Targets

    • Target

      ceebb8371b6b4b30c8b5db9f5ddcea2c515614407ea1867094f451e7dc0dabe0

    • Size

      270KB

    • MD5

      6e3b5808da36756e12da95cd5d0cd5b0

    • SHA1

      363d9e144cedb393b402ded6fb035474434369f4

    • SHA256

      ceebb8371b6b4b30c8b5db9f5ddcea2c515614407ea1867094f451e7dc0dabe0

    • SHA512

      ddc7124f09d719f2a6d6408e372985b010fe9d88ec1055c0fc82a292a995385a27a7b23e028c737aea038379d7546976d195e7948ef4c43dbc61466ce0a258c2

    • SSDEEP

      6144:8IL6ZTPzXDcku3Erl7KPV9AYmJh/kMsZfZumRMnWyXkEgr6CeA:8IL6ZTPjDxuolKdU/IZwmaWog2VA

    Score
    10/10
    gozi_ifsbbankertrojanupx

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks