gozi | f6797e77c438f24283273d304b4d2aa5af442dc3ce7efd3f7a417c9843a715db | Triage

Submit
Reports

Overview

overview

Static

static

3

b5f05cb523...18.exe

windows7-x64

b5f05cb523...18.exe

windows10-2004-x64

3

Sharing

General

Target

b5f05cb523a3d87d3a34012971825bfe_JaffaCakes118
Size

257KB
Sample

240617-apb3esvgnd
MD5

b5f05cb523a3d87d3a34012971825bfe
SHA1

5e40f447b5910205c69208094068236c5df7df3f
SHA256

f6797e77c438f24283273d304b4d2aa5af442dc3ce7efd3f7a417c9843a715db
SHA512

2155fac03d78d2c25877e0c5b2b95b40c7a58ff5e48580dc255ed35bbd41724c139d055fe741c3e81ba2fbfb09ac1d15f99704cf4fa53df9318ef3684a63617d
SSDEEP

3072:BM8FQrvMrRyx+zBGShIkBQAMzPgEWbZtXC8nksMq68R4xYJnsxwYoFAg0FuERWuH:exoIPiQAMzxWbmgj4EnseTAOU9H

Score

10^/10

gozi banker isfb trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b5f05cb523a3d87d3a34012971825bfe_JaffaCakes118.exe

Resource

win7-20240508-en

gozi banker isfb trojan

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

b5f05cb523a3d87d3a34012971825bfe_JaffaCakes118.exe

Resource

win10v2004-20240611-en

windows10-2004-x64

1 signatures

150 seconds

Malware Config

Extracted

Family

gozi

Attributes

build
217025

Targets

- Target
  
  b5f05cb523a3d87d3a34012971825bfe_JaffaCakes118
- Size
  
  257KB
- MD5
  
  b5f05cb523a3d87d3a34012971825bfe
- SHA1
  
  5e40f447b5910205c69208094068236c5df7df3f
- SHA256
  
  f6797e77c438f24283273d304b4d2aa5af442dc3ce7efd3f7a417c9843a715db
- SHA512
  
  2155fac03d78d2c25877e0c5b2b95b40c7a58ff5e48580dc255ed35bbd41724c139d055fe741c3e81ba2fbfb09ac1d15f99704cf4fa53df9318ef3684a63617d
- SSDEEP
  
  3072:BM8FQrvMrRyx+zBGShIkBQAMzPgEWbZtXC8nksMq68R4xYJnsxwYoFAg0FuERWuH:exoIPiQAMzxWbmgj4EnseTAOU9H
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

© 2018-2024

Terms | Privacy