trickbot

General

Target

ca01a71c_by_Libranalysis
Size

404KB
Sample

210506-gf2ct8b2x6
MD5

ca01a71ccc8a2fa1d0f5573fb61ea336
SHA1

9a39b6a0e942b3d7efda50285ce754f3ca86f3fd
SHA256

678de819abf5f00b28eaaa8239169a08a75050a4df26fe3ce5b262d6c7b6cb24
SHA512

8a72be8e1c48b3a3ef344ce6cfe4e2296b4cc8bb73a478c3b444b0dcc2e2070351893494bac2e62e34359f3bdd746987e94434ed28ab501cd47595aabcb71408

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

2000029

Botnet

rob73

C2

103.66.72.217:443

117.252.68.211:443

103.124.173.35:443

115.73.211.230:443

117.54.250.246:443

131.0.112.122:443

102.176.221.78:443

181.176.161.143:443

154.79.251.172:443

103.111.199.76:443

103.54.41.193:443

154.79.244.182:443

154.79.245.158:443

139.255.116.42:443

178.254.161.250:443

178.134.47.166:443

158.181.179.229:443

103.90.197.33:443

109.207.165.40:443

178.72.192.20:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Targets

- Target
  
  ca01a71c_by_Libranalysis
- Size
  
  404KB
- MD5
  
  ca01a71ccc8a2fa1d0f5573fb61ea336
- SHA1
  
  9a39b6a0e942b3d7efda50285ce754f3ca86f3fd
- SHA256
  
  678de819abf5f00b28eaaa8239169a08a75050a4df26fe3ce5b262d6c7b6cb24
- SHA512
  
  8a72be8e1c48b3a3ef344ce6cfe4e2296b4cc8bb73a478c3b444b0dcc2e2070351893494bac2e62e34359f3bdd746987e94434ed28ab501cd47595aabcb71408
Score

10^/10

trickbot rob73 banker trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Templ.dll packer
  Detects Templ.dll packer which usually loads Trickbot.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Templ.dll packer

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2