gozi | e1d63b4e65ef61db22b853686b5dfc4f795047b8701df2f97b0ee40f70e4ce76 | Triage

Submit
Reports

Overview

overview

Static

static

9ccba17edd...18.dll

windows7-x64

9ccba17edd...18.dll

windows10-2004-x64

Sharing

General

Target

9ccba17eddabc2891f70462f7b9f69d4_JaffaCakes118
Size

268KB
Sample

240611-dhjeps1hma
MD5

9ccba17eddabc2891f70462f7b9f69d4
SHA1

5bd4c8ea5d92cb2fab2f5228d77250a53eb0eabb
SHA256

e1d63b4e65ef61db22b853686b5dfc4f795047b8701df2f97b0ee40f70e4ce76
SHA512

fef58591062fb94485bf25a05eb93afe66522dc7f49ff57b92f745bf2a30858655baf798169f04228372c46c11f181a865d9d1d6036c21bf5a6b215b2775c20f
SSDEEP

6144:fubsWqPqlal6mPOA7kjR4Z0JUZ581Xvj33IYZuoQs+8pB:fubsPqgl6mPOnRdUZ54/z3IYZuoQs+

Score

10^/10

gozi banker isfb trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

9ccba17eddabc2891f70462f7b9f69d4_JaffaCakes118.dll

Resource

win7-20240508-en

gozi banker trojan

windows7-x64

3 signatures

150 seconds

Behavioral task

behavioral2

Sample

9ccba17eddabc2891f70462f7b9f69d4_JaffaCakes118.dll

Resource

win10v2004-20240508-en

gozi banker trojan

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Extracted

Family

gozi

Attributes

exe_type
worker

rsa_pubkey.plain

Targets

- Target
  
  9ccba17eddabc2891f70462f7b9f69d4_JaffaCakes118
- Size
  
  268KB
- MD5
  
  9ccba17eddabc2891f70462f7b9f69d4
- SHA1
  
  5bd4c8ea5d92cb2fab2f5228d77250a53eb0eabb
- SHA256
  
  e1d63b4e65ef61db22b853686b5dfc4f795047b8701df2f97b0ee40f70e4ce76
- SHA512
  
  fef58591062fb94485bf25a05eb93afe66522dc7f49ff57b92f745bf2a30858655baf798169f04228372c46c11f181a865d9d1d6036c21bf5a6b215b2775c20f
- SSDEEP
  
  6144:fubsWqPqlal6mPOA7kjR4Z0JUZ581Xvj33IYZuoQs+8pB:fubsPqgl6mPOnRdUZ54/z3IYZuoQs+
Score

10^/10

gozi banker trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankertrojan

behavioral2

gozibankertrojan

© 2018-2024

Terms | Privacy