gozi_ifsb | 4d36701a7ece574dda56feaca4b70d9ee395ccf6c6522142028120b62324efc8 | Triage™

Login
Reports

Overview

overview

Static

static

ph0t0.jpg.dll

windows7_x64

ph0t0.jpg.dll

windows10_x64

Sharing

Copy URL Twitter E-mail

General

Target
ph0t0.jpg.dll
Size 160KB
Sample201216-93flrtgcse
SHA256 4d36701a7ece574dda56feaca4b70d9ee395ccf6c6522142028120b62324efc8
MD5 49fc40f6d58c4f97a38283cd530bf3bb
SHA1 03a0799b99bef6cabb8e4c704cc1dded20ff6590
SHA512 ebba44ce0c524d15a831ac5b02bd23a9eb6635c9e8f51df507dd8fa80035fe833c4935fd6ad2c7f20a8a71f88a728c377f9e93e6d99fa89f698773d7697d675c
MD5 SHA1 SHA512

Score

10^/10

gozi_ifsb banker trojan

Static task

static1

Behavioral task

behavioral1

Sample

ph0t0.jpg.dll

Resource

win7v20201028

windows7_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Behavioral task

behavioral2

Sample

ph0t0.jpg.dll

Resource

win10v20201028

windows10_x64

0 signatures

0 seconds

gozi_ifsb banker trojan

Malware Config

Targets

- Target
  ph0t0.jpg.dll
- Size 160KB
- SHA256 4d36701a7ece574dda56feaca4b70d9ee395ccf6c6522142028120b62324efc8
- MD5 49fc40f6d58c4f97a38283cd530bf3bb
- SHA1 03a0799b99bef6cabb8e4c704cc1dded20ff6590
- SHA512 ebba44ce0c524d15a831ac5b02bd23a9eb6635c9e8f51df507dd8fa80035fe833c4935fd6ad2c7f20a8a71f88a728c377f9e93e6d99fa89f698773d7697d675c
- MD5 SHA1 SHA512
Score

10^/10

gozi_ifsb banker trojan
- Gozi, Gozi IFSB
  Gozi ISFB is a well-known and widely distributed banking trojan.
  banker trojan gozi_ifsb
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

gozi_ifsbbankertrojan

behavioral2

gozi_ifsbbankertrojan

© 2018-2026

Terms | Privacy