| ID | X0022 |
| Aliases | Dreambot, Gozi |
| Platforms | Windows |
| Year | 2016 |
| Associated ATT&CK Software | Ursnif |
A banking trojan that uses malware macros to evade sandbox detection. Variant of Gozi.
| Name | Use |
|---|---|
| Sandbox Detection | Ursnif uses malware macros to evade sandbox detection. [1] |
[1] https://www.cyber.nj.gov/threat-profiles/trojan-variants/ursnif