Overview

overview

10

Static

static

7b2b661233...c9.exe

windows7_x64

10

7b2b661233...c9.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b2b661233d8af2e13cbf8962ad1b409a6494acd806f3d8d43f98eb3ae1fedc9

  • Size

    728KB

  • Sample

    201120-qetphbhfve

  • MD5

    7303c65cd17e9e492b9034e2edeb2381

  • SHA1

    184d689148617ea33efc73f09e4f7c04c05ce7f0

  • SHA256

    7b2b661233d8af2e13cbf8962ad1b409a6494acd806f3d8d43f98eb3ae1fedc9

  • SHA512

    4645f08abbdfac8c9164a9d00e1695a90615119c52bca3081add6104a20f212f2aa4216d55a38f46a873a0c7139ea4f9791659e2f0349758c6f7e06099002e6f

Score
10/10
trickbottot12bankertrojan

Malware Config

Extracted

Family

trickbot

Version

2000017

Botnet

tot12

C2

81.91.234.196:443

2.179.73.140:443

185.160.60.26:443

188.133.138.240:443

181.211.128.49:443

190.107.93.172:443

103.194.88.2:443

203.156.72.34:443

117.222.39.83:443
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      7b2b661233d8af2e13cbf8962ad1b409a6494acd806f3d8d43f98eb3ae1fedc9

    • Size

      728KB

    • MD5

      7303c65cd17e9e492b9034e2edeb2381

    • SHA1

      184d689148617ea33efc73f09e4f7c04c05ce7f0

    • SHA256

      7b2b661233d8af2e13cbf8962ad1b409a6494acd806f3d8d43f98eb3ae1fedc9

    • SHA512

      4645f08abbdfac8c9164a9d00e1695a90615119c52bca3081add6104a20f212f2aa4216d55a38f46a873a0c7139ea4f9791659e2f0349758c6f7e06099002e6f

    Score
    10/10
    trickbottot12bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks