gozi_ifsb | 95921f6bde5e4d71fd4308822db46ce46b646d863037f89f236da7f0337c57d4 | Triage

Sharing

General

Target

51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked_x64
Size

375KB
Sample

221027-drq6xaadcn
MD5

215ab06e4b1fc675de00cf2cf7503bb7
SHA1

6e7316ce894902cd7f174faeaaa708e4ae6983ee
SHA256

95921f6bde5e4d71fd4308822db46ce46b646d863037f89f236da7f0337c57d4
SHA512

80457c66ad719bd23437a3cd295345624409e5ab8681f3bc098b3455e068fcfe30c5195360d9eee7a4c7d9f458093ee1e0833ae8d945031246ddabf5576fb61c
SSDEEP

6144:Uk7CHLMnP9oa639GOQXiyuopjCHLC+y5YUBu+Vo0IfBpXfK:UoCrMnP9oa8GRX2opjCNyY+Vo0IfBJK

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Extracted

Family

gozi_ifsb

Attributes

build
216881

Targets

- Target
  
  51f81493dd1c34c8909d65060b7e96e301e3ec38741660a1248fdc1203b543e8_unpacked_x64
- Size
  
  375KB
- MD5
  
  215ab06e4b1fc675de00cf2cf7503bb7
- SHA1
  
  6e7316ce894902cd7f174faeaaa708e4ae6983ee
- SHA256
  
  95921f6bde5e4d71fd4308822db46ce46b646d863037f89f236da7f0337c57d4
- SHA512
  
  80457c66ad719bd23437a3cd295345624409e5ab8681f3bc098b3455e068fcfe30c5195360d9eee7a4c7d9f458093ee1e0833ae8d945031246ddabf5576fb61c
- SSDEEP
  
  6144:Uk7CHLMnP9oa639GOQXiyuopjCHLC+y5YUBu+Vo0IfBpXfK:UoCrMnP9oa8GRX2opjCNyY+Vo0IfBJK
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2