gozi | 3348fb9463f0cb8c933a909cf19e9247c8b141d485da56ea2cf26e49c0470b2d | Triage

Sharing

General

Target

90d371a2c3bbe3c5e8492a7e2fa01fb1_JaffaCakes118
Size

563KB
Sample

240603-g8kbgaef7y
MD5

90d371a2c3bbe3c5e8492a7e2fa01fb1
SHA1

85603186129401a8cfafcd768518bdbb61f89354
SHA256

3348fb9463f0cb8c933a909cf19e9247c8b141d485da56ea2cf26e49c0470b2d
SHA512

b06953c81e177a227134b8827642dc53ed5ec4de20a2ef09d37c8ad84a16ec64756a20d61c2a099e2d7281721bf352ee8c87c38fd0421f32163b4f0d3ab5a297
SSDEEP

6144:EyYTwhAXjUq01wEd0Rso/rkyOqkskyYYA3A7SM17+oLtNSzpHpv2dYMD00cA3Dpx:EyoFXja507rOqhcYEAP7DpWYqn0Fp0

Score

10^/10

gozi banker isfb trojan

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  90d371a2c3bbe3c5e8492a7e2fa01fb1_JaffaCakes118
- Size
  
  563KB
- MD5
  
  90d371a2c3bbe3c5e8492a7e2fa01fb1
- SHA1
  
  85603186129401a8cfafcd768518bdbb61f89354
- SHA256
  
  3348fb9463f0cb8c933a909cf19e9247c8b141d485da56ea2cf26e49c0470b2d
- SHA512
  
  b06953c81e177a227134b8827642dc53ed5ec4de20a2ef09d37c8ad84a16ec64756a20d61c2a099e2d7281721bf352ee8c87c38fd0421f32163b4f0d3ab5a297
- SSDEEP
  
  6144:EyYTwhAXjUq01wEd0Rso/rkyOqkskyYYA3A7SM17+oLtNSzpHpv2dYMD00cA3Dpx:EyoFXja507rOqhcYEAP7DpWYqn0Fp0
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2