gozi_ifsb | 61619f607468718ff0d2bbae65a9f5b41226affc95d4ef59b6558e3e2c4ad467 | Triage

Sharing

General

Target

07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb_unpacked
Size

285KB
Sample

221026-3wz22saagp
MD5

312ccaa9ff8f39d698c083fd3aabfd5c
SHA1

76248e2ddbd9b2b1084a08a86bcc19ac1e2731d9
SHA256

61619f607468718ff0d2bbae65a9f5b41226affc95d4ef59b6558e3e2c4ad467
SHA512

e7dd2c2724153c1146fbc3cb34ac7fb3d5a7ee1a800f3def99c685884346092354d7217c0a16939cf5b558e61bf2b1b3ed81b0534382c37691febc1bb42ec467
SSDEEP

6144:qpEmN0twjkjnSQKUb2iyBSvlXwu8dB1pvqlalMcDTcyyi:/E0CkjS0b7vvK1pvqgl7DTj

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
216861

Targets

- Target
  
  07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb_unpacked
- Size
  
  285KB
- MD5
  
  312ccaa9ff8f39d698c083fd3aabfd5c
- SHA1
  
  76248e2ddbd9b2b1084a08a86bcc19ac1e2731d9
- SHA256
  
  61619f607468718ff0d2bbae65a9f5b41226affc95d4ef59b6558e3e2c4ad467
- SHA512
  
  e7dd2c2724153c1146fbc3cb34ac7fb3d5a7ee1a800f3def99c685884346092354d7217c0a16939cf5b558e61bf2b1b3ed81b0534382c37691febc1bb42ec467
- SSDEEP
  
  6144:qpEmN0twjkjnSQKUb2iyBSvlXwu8dB1pvqlalMcDTcyyi:/E0CkjS0b7vvK1pvqgl7DTj
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2