gozi | a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5 | Triage

Submit
Reports

Overview

overview

Static

static

3

a969b65202...b5.exe

windows7-x64

a969b65202...b5.exe

windows10-2004-x64

Sharing

General

Target

a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5
Size

596KB
Sample

240624-k4gxbsvcjf
MD5

50aca2f93f28f6408d7d3b5f46c8d963
SHA1

c8fbb2524a096d4308807f99b8b80a13ce9d3512
SHA256

a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5
SHA512

34f74434954748081f18b4933b51f6b0b6da6b7223359ac6d587e9ac1f5e6308a4c975e800cca09562476be896328b82cbc0dbcfdf276f89ab8a104097752b2a
SSDEEP

12288:xqLD9LU7ncQwcj9cqMcNySlSwpQ/FsD61:xqQnHjG1hbODq

Score

10^/10

gozi banker isfb trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5.exe

Resource

win7-20240508-en

gozi banker isfb trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5.exe

Resource

win10v2004-20240508-en

gozi banker isfb trojan

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Extracted

Family

gozi

Targets

- Target
  
  a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5
- Size
  
  596KB
- MD5
  
  50aca2f93f28f6408d7d3b5f46c8d963
- SHA1
  
  c8fbb2524a096d4308807f99b8b80a13ce9d3512
- SHA256
  
  a969b652028c0955e8416bcaf485fdcc8bafad05694fc69853e4a090f01b3eb5
- SHA512
  
  34f74434954748081f18b4933b51f6b0b6da6b7223359ac6d587e9ac1f5e6308a4c975e800cca09562476be896328b82cbc0dbcfdf276f89ab8a104097752b2a
- SSDEEP
  
  12288:xqLD9LU7ncQwcj9cqMcNySlSwpQ/FsD61:xqQnHjG1hbODq
Score

10^/10

gozi banker isfb trojan
- Gozi
  Gozi is a well-known and widely distributed banking trojan.
  banker trojan gozi
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

gozibankerisfbtrojan

behavioral2

gozibankerisfbtrojan

© 2018-2024

Terms | Privacy