gozi | a27ec606125f8c982c0e88897964db49a32505130610cd7256873de908479a56 | Triage

Sharing

General

Target

3d2e58d5e3d5f4c87eddf9063bba8847_JaffaCakes118
Size

115KB
Sample

240514-anfzzsbe5v
MD5

3d2e58d5e3d5f4c87eddf9063bba8847
SHA1

a3dee08a41314eb7545fb9d7f65f8a048d90f229
SHA256

a27ec606125f8c982c0e88897964db49a32505130610cd7256873de908479a56
SHA512

b9d75f22aee98a0026c792c448bb3b25b00bd614d37fc3d22beda64cf437d5b2918548f67fe950a2ff9d95b45ddc040e883f39ccde47dc98ab38a9252383ef8b
SSDEEP

3072:y2kI/7aW9CjSMGScR7YgA+pq9Ep4OvzycbVJ0MTbQ+P:yHI/2W9CFGdRZjq9EiOvzfZKMTPP

Score

10^/10

gozi banker isfb trojan

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  3d2e58d5e3d5f4c87eddf9063bba8847_JaffaCakes118
- Size
  
  115KB
- MD5
  
  3d2e58d5e3d5f4c87eddf9063bba8847
- SHA1
  
  a3dee08a41314eb7545fb9d7f65f8a048d90f229
- SHA256
  
  a27ec606125f8c982c0e88897964db49a32505130610cd7256873de908479a56
- SHA512
  
  b9d75f22aee98a0026c792c448bb3b25b00bd614d37fc3d22beda64cf437d5b2918548f67fe950a2ff9d95b45ddc040e883f39ccde47dc98ab38a9252383ef8b
- SSDEEP
  
  3072:y2kI/7aW9CjSMGScR7YgA+pq9Ep4OvzycbVJ0MTbQ+P:yHI/2W9CFGdRZjq9EiOvzfZKMTPP
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

gozibankerisfbtrojan