Overview

overview

10

Static

static

e9c98bff81...7a.exe

windows7_x64

10

e9c98bff81...7a.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ca16ae7_by_Libranalysis

  • Size

    369KB

  • Sample

    210505-xlkvc3mgkn

  • MD5

    4ca16ae7e2edc8cf644798d3233cb3c0

  • SHA1

    93e51bcdfff261381a252045179bd3eb42532b73

  • SHA256

    727364e49deb58916defdce48ae970b76ded4f326e30d56ef713fec6abc8b0e6

  • SHA512

    e1be21a353b13373c9e7bf1a4cc948f3db5ec488d89b7a2fc87ae8e58ecf093acdbca9afaf1f97cea4ca296d80925734e382e4f598d4fa4330a36b56de721277

Score
10/10
trickbotono23bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000480

Botnet

ono23

C2

144.91.79.9:443

172.245.97.148:443

85.204.116.139:443

185.62.188.117:443

185.222.202.76:443

144.91.79.12:443

185.68.93.43:443

195.123.238.191:443

146.185.219.29:443

195.133.196.151:443

91.235.129.60:443

23.227.206.170:443

185.222.202.192:443

190.154.203.218:449

178.183.150.169:449

200.116.199.10:449

187.58.56.26:449

177.103.240.149:449

81.190.160.139:449

200.21.51.38:449
Attributes
  • autorun
    Control:GetSystemInfo
    Name:systeminfo
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      e9c98bff81ba5138f040cef7acbcb56f0f80abcf41ecf4893d4700e308f6427a.exe

    • Size

      520KB

    • MD5

      5f0e0f1511af373e889e1b5d479aa3e7

    • SHA1

      abd62078830a775b96d2818678284636c4541370

    • SHA256

      e9c98bff81ba5138f040cef7acbcb56f0f80abcf41ecf4893d4700e308f6427a

    • SHA512

      64d8b9b9148e0bac0d7acb6f997b00c09deea50d5c1f0b42c958fa3a7c6d554bc26caeedcf8da4c98e35e3928755b6973c14f488d81f55858cd1ad95bf979158

    Score
    10/10
    trickbotono23bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks