gozi_ifsb | 4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4 | Triage

Sharing

General

Target

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
Size

603KB
Sample

221027-aegj6aabd9
MD5

7e223a197b4fa1c64ea0b79efe0a9225
SHA1

8122818f2b63ba34faf0bc3c0fbe3184a91a67ab
SHA256

4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
SHA512

9862e03d94791027d4c2bcde4da94bd273ab5ba10397c87897f62d219251c86ef5618e1fc21020979f853bb13cbda090c770ce0f27b7323cd71a4766e0c4708e
SSDEEP

12288:dkEkVwdpywnVtAxRgP8b1uHOJC60Jpd8dOgvpe59HAw:dkh6dpj8LgPiR0ndEtsGw

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
- Size
  
  603KB
- MD5
  
  7e223a197b4fa1c64ea0b79efe0a9225
- SHA1
  
  8122818f2b63ba34faf0bc3c0fbe3184a91a67ab
- SHA256
  
  4b373042809dbc09043c9aa5d2ac7570b91327fc47c8caef918c72ba786f33b4
- SHA512
  
  9862e03d94791027d4c2bcde4da94bd273ab5ba10397c87897f62d219251c86ef5618e1fc21020979f853bb13cbda090c770ce0f27b7323cd71a4766e0c4708e
- SSDEEP
  
  12288:dkEkVwdpywnVtAxRgP8b1uHOJC60Jpd8dOgvpe59HAw:dkh6dpj8LgPiR0ndEtsGw
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan