Overview

overview

10

Static

static

printme.bin.dll

windows7_x64

10

printme.bin.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    printme.bin
  • Size 776KB
  • Sample210408-l3mj19cfbj
  • SHA256 a3cebf31e185cfae066634a108c3bee7de5c32475411c5398525e2e2caf00d80
  • MD5 SHA1 SHA512
Score
10/10
trickbotrob47bankertrojan

Malware Config

Extracted

Family

  • trickbot

Version

  • 2000028

Botnet

  • rob47

C2

  • 89.250.208.42:449

  • 182.253.184.130:449

  • 31.211.85.110:443

  • 85.112.74.178:449

  • 102.68.17.97:443

  • 103.76.150.14:443

  • 96.9.77.142:443

  • 91.185.236.170:449

  • 87.76.1.81:449

  • 91.225.231.120:443

  • 62.213.14.166:443

  • 81.95.45.234:449

  • 148.216.32.55:443

  • 109.185.139.90:449

  • 202.166.211.197:443

  • 196.41.57.46:449

  • 84.21.206.164:449

  • 190.122.168.219:443

  • 77.95.93.132:449

  • 41.77.134.250:443

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target
      printme.bin
    • Size 776KB
    • SHA256 a3cebf31e185cfae066634a108c3bee7de5c32475411c5398525e2e2caf00d80
    • MD5 SHA1 SHA512
    Score
    10/10
    trickbotrob47bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Templ.dll packer

      Detects Templ.dll packer which usually loads Trickbot.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks