gozi | a77ab8771a4f9d56d3c536aeb36fda71f2e71454bf2c7f600829e945f416915e | Triage

Submit
Reports

Overview

overview

Static

static

1

9ef1b0cbdc...18.exe

windows7-x64

9ef1b0cbdc...18.exe

windows10-2004-x64

3

Sharing

General

Target

9ef1b0cbdc9382541e83f48fd9b9880f_JaffaCakes118
Size

465KB
Sample

240611-vsvn6avard
MD5

9ef1b0cbdc9382541e83f48fd9b9880f
SHA1

8d57905f90fb8874859fd1b95071651f80350055
SHA256

a77ab8771a4f9d56d3c536aeb36fda71f2e71454bf2c7f600829e945f416915e
SHA512

f2c2e5c92bfd4f66db4aff7f829aeb84c2396fb55b064e70c06d3adb76e0824872efb30d589a1176a160897d10595c5a7da92ca26119828b315e901c7176ce9c
SSDEEP

12288:wUuV+IAUeSqni9qx5eqXuRBHdzgscY3KNG:wXCBUqx5W3qcJ

Score

10^/10

gozi banker isfb trojan

Static task

static1

Behavioral task

behavioral1

Sample

9ef1b0cbdc9382541e83f48fd9b9880f_JaffaCakes118.exe

Resource

win7-20240419-en

gozi banker isfb trojan

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

9ef1b0cbdc9382541e83f48fd9b9880f_JaffaCakes118.exe

Resource

win10v2004-20240426-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  9ef1b0cbdc9382541e83f48fd9b9880f_JaffaCakes118
- Size
  
  465KB
- MD5
  
  9ef1b0cbdc9382541e83f48fd9b9880f
- SHA1
  
  8d57905f90fb8874859fd1b95071651f80350055
- SHA256
  
  a77ab8771a4f9d56d3c536aeb36fda71f2e71454bf2c7f600829e945f416915e
- SHA512
  
  f2c2e5c92bfd4f66db4aff7f829aeb84c2396fb55b064e70c06d3adb76e0824872efb30d589a1176a160897d10595c5a7da92ca26119828b315e901c7176ce9c
- SSDEEP
  
  12288:wUuV+IAUeSqni9qx5eqXuRBHdzgscY3KNG:wXCBUqx5W3qcJ
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

© 2018-2024

Terms | Privacy