Behavioral task
behavioral1
Sample
812fca175f63a63380cc09b822399dc99cf2f0e9248003ed76cfb26033828f09.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
812fca175f63a63380cc09b822399dc99cf2f0e9248003ed76cfb26033828f09.exe
Resource
win10v20201028
General
-
Target
812fca175f63a63380cc09b822399dc99cf2f0e9248003ed76cfb26033828f09
-
Size
226KB
-
MD5
2c6261543b4afdc73780193769c4b971
-
SHA1
ce578cfd43137888d4be4c2d3d39e9a0d70cc22d
-
SHA256
812fca175f63a63380cc09b822399dc99cf2f0e9248003ed76cfb26033828f09
-
SHA512
5619c2418d292bc490225b9661975939a767f5c464a30f6c85746b13e06fef56ba15eb730645a571885e6423bcaea337c3b0f0ebfd45edd9643b2fb4c47eda8d
Malware Config
Extracted
trickbot
100003
tar3
102.164.206.129:449
103.131.156.21:449
103.131.157.102:449
103.131.157.161:449
103.146.232.5:449
103.150.68.124:449
103.156.126.232:449
103.30.85.157:449
103.52.47.20:449
-
autorunName:pwgrab
Signatures
-
Trickbot family
Files
-
812fca175f63a63380cc09b822399dc99cf2f0e9248003ed76cfb26033828f09.exe windows x86