Overview

overview

10

Static

static

34aba4b668...33.exe

windows7_x64

10

34aba4b668...33.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34aba4b668b4f82e6fce7f6fc02c1d1c82a0352692979604d145f38ab2bd3433

  • Size

    534KB

  • Sample

    201115-wytawvdq6s

  • MD5

    9d817d2b622720bf60d24cbe2e15c5f1

  • SHA1

    6755bd9796f0d9e188b72600f8b5a88138829982

  • SHA256

    34aba4b668b4f82e6fce7f6fc02c1d1c82a0352692979604d145f38ab2bd3433

  • SHA512

    c2617c1c1a2006c809c117eb88341e700b5cb604baf6a831344aab456fa7c7b025e29a684e6e30e006e5c6bb3c5534cdd654bf2b592f3aacc3e7c94f071bde90

Score
10/10
trickbotono23bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000480

Botnet

ono23

C2

144.91.79.9:443

172.245.97.148:443

85.204.116.139:443

185.62.188.117:443

185.222.202.76:443

144.91.79.12:443

185.68.93.43:443

195.123.238.191:443

146.185.219.29:443

195.133.196.151:443

91.235.129.60:443

23.227.206.170:443

185.222.202.192:443

190.154.203.218:449

178.183.150.169:449

200.116.199.10:449

187.58.56.26:449

177.103.240.149:449

81.190.160.139:449

200.21.51.38:449
Attributes
  • autorun
    Control:GetSystemInfo
    Name:systeminfo
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      34aba4b668b4f82e6fce7f6fc02c1d1c82a0352692979604d145f38ab2bd3433

    • Size

      534KB

    • MD5

      9d817d2b622720bf60d24cbe2e15c5f1

    • SHA1

      6755bd9796f0d9e188b72600f8b5a88138829982

    • SHA256

      34aba4b668b4f82e6fce7f6fc02c1d1c82a0352692979604d145f38ab2bd3433

    • SHA512

      c2617c1c1a2006c809c117eb88341e700b5cb604baf6a831344aab456fa7c7b025e29a684e6e30e006e5c6bb3c5534cdd654bf2b592f3aacc3e7c94f071bde90

    Score
    10/10
    trickbotono23bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks