Overview

overview

10

Static

static

servizi.dll

windows7_x64

1

servizi.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    servizi.dll
  • Size 140KB
  • Sample200925-1kybs8scf6
  • SHA256 ba1a4ae1f2155524be33ae4addcc907881d1b4e64c4a8090f4f77d1ad1e87cd0
  • MD5 SHA1 SHA512
Score
10/10
gozi_ifsbbankertrojan

Malware Config

Targets

    • Target
      servizi.dll
    • Size 140KB
    • SHA256 ba1a4ae1f2155524be33ae4addcc907881d1b4e64c4a8090f4f77d1ad1e87cd0
    • MD5 SHA1 SHA512
    Score
    10/10
    bankertrojangozi_ifsb

    • Gozi, Gozi IFSB

      Gozi ISFB is a well-known and widely distributed banking trojan.

      bankertrojangozi_ifsb

    • Blacklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks