gozi_ifsb | 668ac0ef90e0db8dd33020335f43505d1afce803b7e659d51e3be2bdcc933c5f | Triage

Sharing

General

Target

51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked
Size

283KB
Sample

221027-aej1aaabeq
MD5

30aea45bf0485a95a8cfa5254aa9e5d5
SHA1

e7e9483142105311a04dacdc19ac10e060735b44
SHA256

668ac0ef90e0db8dd33020335f43505d1afce803b7e659d51e3be2bdcc933c5f
SHA512

3b0e0a3a069af5676e56de0f9b934084290ded4144f7f5ba213d384f531550eb0b67b635f36097b8018d81462f151a827b8325f3edf148a839e0ce031179734b
SSDEEP

6144:09Rv3hOkTHNncBQtfUTqlalxR+u8dsiH6dGKGIyV3EeXiI610zyIckzRiAo:0r5HNtsTqglx5bHdL+39810zyIc5Ao

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
216881

Targets

- Target
  
  51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked
- Size
  
  283KB
- MD5
  
  30aea45bf0485a95a8cfa5254aa9e5d5
- SHA1
  
  e7e9483142105311a04dacdc19ac10e060735b44
- SHA256
  
  668ac0ef90e0db8dd33020335f43505d1afce803b7e659d51e3be2bdcc933c5f
- SHA512
  
  3b0e0a3a069af5676e56de0f9b934084290ded4144f7f5ba213d384f531550eb0b67b635f36097b8018d81462f151a827b8325f3edf148a839e0ce031179734b
- SSDEEP
  
  6144:09Rv3hOkTHNncBQtfUTqlalxR+u8dsiH6dGKGIyV3EeXiI610zyIckzRiAo:0r5HNtsTqglx5bHdL+39810zyIc5Ao
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2