gozi | 32deedbe62cf85fdce7e27ea0a89adebe80ac6e8fb2c84e14ef4c4dc1eca5d8f | Triage

Sharing

General

Target

JaffaCakes118_50a93e1ea037ed7c506ec3d531a493f7
Size

26KB
Sample

250305-ft5s7aznw5
MD5

50a93e1ea037ed7c506ec3d531a493f7
SHA1

09d7fb5b1ef758153b6d984695530f04aa348288
SHA256

32deedbe62cf85fdce7e27ea0a89adebe80ac6e8fb2c84e14ef4c4dc1eca5d8f
SHA512

ce2f14af2cb64c413559a78b6420e58dcdb9f1705bf06793bd46ee07f28c6f451f37f2075b1d5e01421102a025606c05b029611a2ef5504b06b6625a79c8edc6
SSDEEP

768:cCZBagmNfJoV0p/GZ+qB2N1x7iZByzHs:cCWgmNy9hB2N1Rsw

Score

10^/10

gozi banker discovery isfb trojan

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  JaffaCakes118_50a93e1ea037ed7c506ec3d531a493f7
- Size
  
  26KB
- MD5
  
  50a93e1ea037ed7c506ec3d531a493f7
- SHA1
  
  09d7fb5b1ef758153b6d984695530f04aa348288
- SHA256
  
  32deedbe62cf85fdce7e27ea0a89adebe80ac6e8fb2c84e14ef4c4dc1eca5d8f
- SHA512
  
  ce2f14af2cb64c413559a78b6420e58dcdb9f1705bf06793bd46ee07f28c6f451f37f2075b1d5e01421102a025606c05b029611a2ef5504b06b6625a79c8edc6
- SSDEEP
  
  768:cCZBagmNfJoV0p/GZ+qB2N1x7iZByzHs:cCWgmNy9hB2N1Rsw
Score

10^/10

gozi banker discovery isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
- Gozi family
  gozi
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gozibankerdiscoveryisfbtrojan

behavioral2

gozibankerdiscoveryisfbtrojan