gozi_ifsb | 274171362e7928c3e70241f0d282a8d661cb16c41c787d3006a1810c0f76299f | Triage

Sharing

General

Target

53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457_unpacked
Size

367KB
Sample

221027-ev9cbsaeg7
MD5

75b2ecdb38a1a89a620edd99219ba89a
SHA1

cd4a73173a115514dfa71c5b2d611ed955d1b2a3
SHA256

274171362e7928c3e70241f0d282a8d661cb16c41c787d3006a1810c0f76299f
SHA512

073776ad6c1a175584d7aefe5b09c2131f29bcfd6086e57d5bd9653463128f51d93b91c5ea260d21ccd593a48bf4ae73c06679d7e6ed17f83adc3e0225d862a7
SSDEEP

6144:Tckh9rP7lRaXoQ9khE2EiWrqkduoQeqlalrnB4AhdNorGvHdbi09GJGF6iO8:ThPa4rbzguoQeqglSAHhlyR

Score

10^/10

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  
  53f7d917ad9ebf5b7d2ccc1a835083bc0c0b92cc69ee584703ea6e4345f5c457_unpacked
- Size
  
  367KB
- MD5
  
  75b2ecdb38a1a89a620edd99219ba89a
- SHA1
  
  cd4a73173a115514dfa71c5b2d611ed955d1b2a3
- SHA256
  
  274171362e7928c3e70241f0d282a8d661cb16c41c787d3006a1810c0f76299f
- SHA512
  
  073776ad6c1a175584d7aefe5b09c2131f29bcfd6086e57d5bd9653463128f51d93b91c5ea260d21ccd593a48bf4ae73c06679d7e6ed17f83adc3e0225d862a7
- SSDEEP
  
  6144:Tckh9rP7lRaXoQ9khE2EiWrqkduoQeqlalrnB4AhdNorGvHdbi09GJGF6iO8:ThPa4rbzguoQeqglSAHhlyR
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan