Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

Frog_Standard_Test

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CHIL64KIOL.exe

  • Size

    535KB

  • Sample

    200710-fnmnp8692s

  • MD5

    5bf8e55247c38900f94178eca68df336

  • SHA1

    2ebb72e08ff2c146c85d37bc7c966be263174ef1

  • SHA256

    01aa55a89b1daf73919d9e2e8d4570be3a1f5df44d9b085d097b75a153e93a56

  • SHA512

    618a5d8f0059e97f053c8d43c406ff1ff9d582abdf9a0bfe81669f46c576c0c3f3506ebe20dd2423e2a3fc46cd9dc5c2d046f5e57c4944490f32490ebc93a0f6

Score
10/10
trickbotchil64bankerspywaretrojan

Malware Config

Extracted

Family

trickbot

Version

1000512

Botnet

chil64

C2

95.171.16.42:443

185.90.61.9:443

5.1.81.68:443

185.99.2.65:443

134.119.191.11:443

85.204.116.100:443

78.108.216.47:443

51.81.112.144:443

194.5.250.121:443

185.14.31.104:443

185.99.2.66:443

107.175.72.141:443

192.3.247.123:443

134.119.191.21:443

85.204.116.216:443

91.235.129.20:443

181.129.104.139:449

181.112.157.42:449

181.129.134.18:449

131.161.253.190:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      CHIL64KIOL.exe

    • Size

      535KB

    • MD5

      5bf8e55247c38900f94178eca68df336

    • SHA1

      2ebb72e08ff2c146c85d37bc7c966be263174ef1

    • SHA256

      01aa55a89b1daf73919d9e2e8d4570be3a1f5df44d9b085d097b75a153e93a56

    • SHA512

      618a5d8f0059e97f053c8d43c406ff1ff9d582abdf9a0bfe81669f46c576c0c3f3506ebe20dd2423e2a3fc46cd9dc5c2d046f5e57c4944490f32490ebc93a0f6

    Score
    10/10
    spywaretrojanbankertrickbot

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks