Overview

overview

10

Static

static

fltMC7e0.exe

windows7_x64

10

fltMC7e0.exe

windows10_x64

10

Resubmissions

28/10/2020, 11:13

201028-y8ahpbqxx67

28/10/2020, 00:25

201028-ndxae1c7qe1

Sharing

Copy URL Twitter E-mail

General

  • Target
    fltMC7e0.exe
  • Size 976KB
  • Sample201028-ndxae1c7qe
  • SHA256 d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f
  • MD5 SHA1 SHA512
Score
10/10
trickbotmor138bankertrojan

Malware Config

Extracted

Family

  • trickbot

Version

  • 2000015

Botnet

  • mor138

C2

  • 185.227.236.58:443

  • 186.46.91.2:443

  • 187.62.208.234:443

  • 188.17.149.172:443

  • 190.53.45.122:443

  • 190.61.43.130:443

  • 191.7.201.200:443

  • 36.74.73.136:443

  • 36.80.36.21:443

  • 36.89.250.111:443

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target
      fltMC7e0.exe
    • Size 976KB
    • SHA256 d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f
    • MD5 SHA1 SHA512
    Score
    10/10
    trickbotmor138bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks