gozi | 54e426bdf943265702b4df3e6d99d1463f838a8709474fe3c3750864d510e7f8 | Triage

Sharing

General

Target

6cbbfc9634222b57530d9174d8edb6ec_JaffaCakes118
Size

350KB
Sample

240524-ae724sed67
MD5

6cbbfc9634222b57530d9174d8edb6ec
SHA1

48fc6b911ccaaa701e4e3ea66f1ec33782d26372
SHA256

54e426bdf943265702b4df3e6d99d1463f838a8709474fe3c3750864d510e7f8
SHA512

77868d556ccd6be7003445d47e47bd4070e73a59c224d526a69a3ed3ff7fb4bfb8666badca5419d6cdba7abbdcebf35039b56c6d07f63375cc84cd3f27b396b1
SSDEEP

6144:RukiCIXQRFUPRLLHpsn4ku4JMWmaF0oc:R0vXqFMFHps4kPeuz

Score

10^/10

gozi banker isfb trojan

Malware Config

Extracted

Family

gozi

Attributes

build
217039

Targets

- Target
  
  6cbbfc9634222b57530d9174d8edb6ec_JaffaCakes118
- Size
  
  350KB
- MD5
  
  6cbbfc9634222b57530d9174d8edb6ec
- SHA1
  
  48fc6b911ccaaa701e4e3ea66f1ec33782d26372
- SHA256
  
  54e426bdf943265702b4df3e6d99d1463f838a8709474fe3c3750864d510e7f8
- SHA512
  
  77868d556ccd6be7003445d47e47bd4070e73a59c224d526a69a3ed3ff7fb4bfb8666badca5419d6cdba7abbdcebf35039b56c6d07f63375cc84cd3f27b396b1
- SSDEEP
  
  6144:RukiCIXQRFUPRLLHpsn4ku4JMWmaF0oc:R0vXqFMFHps4kPeuz
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

gozibankerisfbtrojan