fltMC7e0.exe

General
Target

fltMC7e0.exe

Size

976KB

Sample

201028-ndxae1c7qe

Score
10 /10
MD5

30d365051e1c8ef9a84843ac9b10998f

SHA1

4a01901391b9899b9d07ccff4f8c4521d4644faa

SHA256

d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f

SHA512

8b5a4b88943bd3920fe0ab84369f1e1577a10c869c5c8ebf78e54e84352828adf3326fb368ce6ac9915939712e912ac400bfa750ad05b13f22fb5020ab125829

Malware Config

Extracted

Family trickbot
Version 2000015
Botnet mor138
C2

185.227.236.58:443

186.46.91.2:443

187.62.208.234:443

188.17.149.172:443

190.53.45.122:443

190.61.43.130:443

191.7.201.200:443

36.74.73.136:443

36.80.36.21:443

36.89.250.111:443

Attributes
autorun
Name: pwgrab
ecc_pubkey.base64
Targets
Target

fltMC7e0.exe

MD5

30d365051e1c8ef9a84843ac9b10998f

Filesize

976KB

Score
10 /10
SHA1

4a01901391b9899b9d07ccff4f8c4521d4644faa

SHA256

d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f

SHA512

8b5a4b88943bd3920fe0ab84369f1e1577a10c869c5c8ebf78e54e84352828adf3326fb368ce6ac9915939712e912ac400bfa750ad05b13f22fb5020ab125829

Tags

Signatures

  • Trickbot

    Description

    Developed in 2016, TrickBot is one of the more recent banking Trojans.

    Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          10/10

                          behavioral2

                          10/10