gozi_ifsb | 07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb | Triage

Sharing

General

Target

07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb
Size

608KB
Sample

221026-3wzraaaagn
MD5

6a9c749802224cd413b2264931686f13
SHA1

3ec5a5fe4c8e6b884b2fb9f11f9995fdaa608218
SHA256

07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb
SHA512

d596d617cd7a5dc06954b8613c2493585fbbf51e5076b7ee465d31b395c61a031d7703026c4ccacdf25f6b48aac29f3e5f071bfefb7964c2388f63450185831d
SSDEEP

12288:3hIP/ejOS9U1BPUQEdFQkF3ouKo4ZdEnautariXUE1tObzWVKx/:3G/etU12QYFVod4NWgUStE5/

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb
- Size
  
  608KB
- MD5
  
  6a9c749802224cd413b2264931686f13
- SHA1
  
  3ec5a5fe4c8e6b884b2fb9f11f9995fdaa608218
- SHA256
  
  07658c673d6fef7c467c279eaacb5387b991cbdf82f0b5695a8d9117102db3fb
- SHA512
  
  d596d617cd7a5dc06954b8613c2493585fbbf51e5076b7ee465d31b395c61a031d7703026c4ccacdf25f6b48aac29f3e5f071bfefb7964c2388f63450185831d
- SSDEEP
  
  12288:3hIP/ejOS9U1BPUQEdFQkF3ouKo4ZdEnautariXUE1tObzWVKx/:3G/etU12QYFVod4NWgUStE5/
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan