trickbot

General

Target

6c904f4b_by_Libranalysis
Size

214KB
Sample

210511-28hgy3lf32
MD5

6c904f4bb401ce90aae608a9521dd666
SHA1

9c24ffc3beae490a769fc990910b8f136ad3cd67
SHA256

7806c5adbd597c7c21ae08f3ca6c65a98df2ae314f033ad57ae8708c930a4af2
SHA512

eb9fc44a3f04c11fec7e5c2a790f481ba9cf590c64c935bbe2047b24b1f61fda0a7cf011562d0b610b426f586b8825a4cc5c06661a61decde16c60dc3a319a94

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

2000029

Botnet

rob72

C2

103.66.72.217:443

117.252.68.211:443

103.124.173.35:443

115.73.211.230:443

117.54.250.246:443

131.0.112.122:443

102.176.221.78:443

181.176.161.143:443

154.79.251.172:443

103.111.199.76:443

103.54.41.193:443

154.79.244.182:443

154.79.245.158:443

139.255.116.42:443

178.254.161.250:443

178.134.47.166:443

158.181.179.229:443

103.90.197.33:443

109.207.165.40:443

178.72.192.20:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Targets

- Target
  
  6c904f4b_by_Libranalysis
- Size
  
  214KB
- MD5
  
  6c904f4bb401ce90aae608a9521dd666
- SHA1
  
  9c24ffc3beae490a769fc990910b8f136ad3cd67
- SHA256
  
  7806c5adbd597c7c21ae08f3ca6c65a98df2ae314f033ad57ae8708c930a4af2
- SHA512
  
  eb9fc44a3f04c11fec7e5c2a790f481ba9cf590c64c935bbe2047b24b1f61fda0a7cf011562d0b610b426f586b8825a4cc5c06661a61decde16c60dc3a319a94
Score

10^/10

trickbot rob72 banker trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Templ.dll packer
  Detects Templ.dll packer which usually loads Trickbot.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Templ.dll packer

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2