Overview

overview

10

Static

static

fltMC7e0.exe

windows7_x64

10

fltMC7e0.exe

windows10_x64

10

Resubmissions

28-10-2020 11:13

201028-y8ahpbqxx6 7

28-10-2020 00:25

201028-ndxae1c7qe 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fltMC7e0.exe

  • Size

    976KB

  • Sample

    201028-ndxae1c7qe

  • MD5

    30d365051e1c8ef9a84843ac9b10998f

  • SHA1

    4a01901391b9899b9d07ccff4f8c4521d4644faa

  • SHA256

    d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f

  • SHA512

    8b5a4b88943bd3920fe0ab84369f1e1577a10c869c5c8ebf78e54e84352828adf3326fb368ce6ac9915939712e912ac400bfa750ad05b13f22fb5020ab125829

Score
10/10
trickbotmor138bankertrojan

Malware Config

Extracted

Family

trickbot

Version

2000015

Botnet

mor138

C2

185.227.236.58:443

186.46.91.2:443

187.62.208.234:443

188.17.149.172:443

190.53.45.122:443

190.61.43.130:443

191.7.201.200:443

36.74.73.136:443

36.80.36.21:443

36.89.250.111:443
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      fltMC7e0.exe

    • Size

      976KB

    • MD5

      30d365051e1c8ef9a84843ac9b10998f

    • SHA1

      4a01901391b9899b9d07ccff4f8c4521d4644faa

    • SHA256

      d11866e458626e81d4aa4bd9fdb441bec5a684ccaf7b786acddb95377d66b72f

    • SHA512

      8b5a4b88943bd3920fe0ab84369f1e1577a10c869c5c8ebf78e54e84352828adf3326fb368ce6ac9915939712e912ac400bfa750ad05b13f22fb5020ab125829

    Score
    10/10
    trickbotmor138bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks