gozi | 7e21a9998ae9f039f6d90f428f17bdcbe2863c8dd91585e41b13d399cc142fe2 | Triage

Sharing

General

Target

562ce419af442760ddee7fec62186f62_JaffaCakes118
Size

371KB
Sample

240518-w4qp1shf23
MD5

562ce419af442760ddee7fec62186f62
SHA1

d71735ac11a2d960e45f404b09a1fb5cad0016a4
SHA256

7e21a9998ae9f039f6d90f428f17bdcbe2863c8dd91585e41b13d399cc142fe2
SHA512

704e76ebc044668d6a687b29fc67a28bb9f4723ef0d2cd44eb61bdc878f33739d951808b778de592225092387da766cf917ed20e579bc27558edabff060c854e
SSDEEP

6144:G3MsyAHzIpNO9TgwOtYlNydEssQt+nQ9BrLmxp7DU:G3MXAec0VtyNwEfzn0qpU

Score

10^/10

gozi banker isfb trojan

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  562ce419af442760ddee7fec62186f62_JaffaCakes118
- Size
  
  371KB
- MD5
  
  562ce419af442760ddee7fec62186f62
- SHA1
  
  d71735ac11a2d960e45f404b09a1fb5cad0016a4
- SHA256
  
  7e21a9998ae9f039f6d90f428f17bdcbe2863c8dd91585e41b13d399cc142fe2
- SHA512
  
  704e76ebc044668d6a687b29fc67a28bb9f4723ef0d2cd44eb61bdc878f33739d951808b778de592225092387da766cf917ed20e579bc27558edabff060c854e
- SSDEEP
  
  6144:G3MsyAHzIpNO9TgwOtYlNydEssQt+nQ9BrLmxp7DU:G3MXAec0VtyNwEfzn0qpU
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

gozibankerisfbtrojan