General
-
Target
45d7a3f23ca8954c9d2e50ec0c7b08a9
-
Size
706KB
-
Sample
211021-w67fjsafc3
-
MD5
45d7a3f23ca8954c9d2e50ec0c7b08a9
-
SHA1
fc3354ac568d5ed7540d3c53f7201d0c1d543986
-
SHA256
c0c4cf3a74e70f837e73f44ed95789946b02de457b6155ddc4e14a9441f92048
-
SHA512
0b03887e9c25253decc1a2e1c73479d880b1d359bdd500b0dcf3c24e08d3f4ceae1f319546a49ff5ae2e1a51de3eaa1ddf259ce7d27d1ab53ec9a92f8d850ecd
Malware Config
Extracted
trickbot
100019
rob136
65.152.201.203:443
185.56.175.122:443
46.99.175.217:443
179.189.229.254:443
46.99.175.149:443
181.129.167.82:443
216.166.148.187:443
46.99.188.223:443
128.201.76.252:443
62.99.79.77:443
60.51.47.65:443
24.162.214.166:443
45.36.99.184:443
97.83.40.67:443
184.74.99.214:443
103.105.254.17:443
62.99.76.213:443
82.159.149.52:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
45d7a3f23ca8954c9d2e50ec0c7b08a9
-
Size
706KB
-
MD5
45d7a3f23ca8954c9d2e50ec0c7b08a9
-
SHA1
fc3354ac568d5ed7540d3c53f7201d0c1d543986
-
SHA256
c0c4cf3a74e70f837e73f44ed95789946b02de457b6155ddc4e14a9441f92048
-
SHA512
0b03887e9c25253decc1a2e1c73479d880b1d359bdd500b0dcf3c24e08d3f4ceae1f319546a49ff5ae2e1a51de3eaa1ddf259ce7d27d1ab53ec9a92f8d850ecd
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-