General

  • Target

    660075da64a94b7d0a1384104074678c11f6c8465d82946320fa93b34a2311be.exe

  • Size

    244KB

  • Sample

    210128-ma2tn5g2j6

  • MD5

    204cad2ca5a6ee7883b3bc90b3a1a783

  • SHA1

    4480951132ce71cd684955dc01f2664c44b74eef

  • SHA256

    660075da64a94b7d0a1384104074678c11f6c8465d82946320fa93b34a2311be

  • SHA512

    ba06c573661dad1631cad5f76559d97ba45ac5ad1fe9fe8b0597029a471f26ee14fa7b108d99da3e42716c893623b68a21536d0d458381f754450af2c4efbe14

Score
10/10

Malware Config

Extracted

Family

trickbot

Version

100010

Botnet

kin8

C2

5.34.180.180:443

64.74.160.228:443

198.46.198.116:443

5.34.180.185:443

107.152.46.188:443

195.123.241.214:443

23.254.224.2:443

107.172.188.113:443

200.52.147.93:443

185.198.59.45:443

45.14.226.101:443

185.82.126.38:443

85.204.116.139:443

45.155.173.248:443

103.91.244.50:443

45.230.244.20:443

45.226.124.226:443

187.84.95.6:443

186.250.157.116:443

186.137.85.76:443

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      660075da64a94b7d0a1384104074678c11f6c8465d82946320fa93b34a2311be.exe

    • Size

      244KB

    • MD5

      204cad2ca5a6ee7883b3bc90b3a1a783

    • SHA1

      4480951132ce71cd684955dc01f2664c44b74eef

    • SHA256

      660075da64a94b7d0a1384104074678c11f6c8465d82946320fa93b34a2311be

    • SHA512

      ba06c573661dad1631cad5f76559d97ba45ac5ad1fe9fe8b0597029a471f26ee14fa7b108d99da3e42716c893623b68a21536d0d458381f754450af2c4efbe14

    Score
    3/10

MITRE ATT&CK Matrix

Tasks