gozi | d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d | Triage

Sharing

General

Target

7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
Size

456KB
Sample

240527-awm39sag38
MD5

7754480cc3b682654a4f308a3e52e85e
SHA1

0d74e814ee7dbbc89bd1b7a9b89d2227ed3a0334
SHA256

d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d
SHA512

ca63723516ed053f1e88a32f0141697435a468b27cacd2fa86af3ed2ef54cf4ed7e6ab65e5959a5f544a2536a34940aea77abfa3a34db80c0ae6a610ba47ac45
SSDEEP

12288:WrnGiEfgZaBdxhNiucVJGTOdqFL6LZkrcWkbl:knGimSAbqvQF2eQ5

Score

10^/10

gozi banker isfb trojan

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  7754480cc3b682654a4f308a3e52e85e_JaffaCakes118
- Size
  
  456KB
- MD5
  
  7754480cc3b682654a4f308a3e52e85e
- SHA1
  
  0d74e814ee7dbbc89bd1b7a9b89d2227ed3a0334
- SHA256
  
  d73edb11c1597d9dc64545f079c230911e5505489e68aa1575153430b273a18d
- SHA512
  
  ca63723516ed053f1e88a32f0141697435a468b27cacd2fa86af3ed2ef54cf4ed7e6ab65e5959a5f544a2536a34940aea77abfa3a34db80c0ae6a610ba47ac45
- SSDEEP
  
  12288:WrnGiEfgZaBdxhNiucVJGTOdqFL6LZkrcWkbl:knGimSAbqvQF2eQ5
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2