General
-
Target
7e29d464e336d904d8aee54edf8b499c4095c3659a8b202218903f071239d983.zip
-
Size
381KB
-
Sample
201118-mj5g2t16rx
-
MD5
0fa5d3d2f76142457ed3fa09da32a89c
-
SHA1
e93f8866029d0a8ba8369fcf9c229e44009146cc
-
SHA256
69389bee546fe735efe08fb5c70199fc9c683d7aa2d6d319178acac551061048
-
SHA512
d729427be632453328276197a1a8c5d0c50e8d60b7e36d088e90336b253edefed353ac6006a81c4e47e446c9cb3c243a481e8b99ef8372995a670f0c4693cba0
Malware Config
Extracted
trickbot
1000480
ono23
144.91.79.9:443
172.245.97.148:443
85.204.116.139:443
185.62.188.117:443
185.222.202.76:443
144.91.79.12:443
185.68.93.43:443
195.123.238.191:443
146.185.219.29:443
195.133.196.151:443
91.235.129.60:443
23.227.206.170:443
185.222.202.192:443
190.154.203.218:449
178.183.150.169:449
200.116.199.10:449
187.58.56.26:449
177.103.240.149:449
81.190.160.139:449
200.21.51.38:449
-
autorunControl:GetSystemInfoName:systeminfoName:pwgrab
Targets
-
-
Target
7e29d464e336d904d8aee54edf8b499c4095c3659a8b202218903f071239d983.exe
-
Size
534KB
-
MD5
8f77e6489fa90273986d3a841bbdeb42
-
SHA1
312b86e00af45e187b52f2bf30b16233d882b7e8
-
SHA256
7e29d464e336d904d8aee54edf8b499c4095c3659a8b202218903f071239d983
-
SHA512
435e8da0737cf341532b4cbff6419efc2b96e70221bb58a7c191e53e7d262abea2028c33d579326c77abb9c1b4b8d4f67a94e1233c1ba9c4de71ab31d133d951
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot x86 loader
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
Executes dropped EXE
-