General
-
Target
28ae050b4df9f0daf6de9bf20190d908e9931bd7a4c8c0ae8044c1e502d31de2
-
Size
1.8MB
-
Sample
211207-p4nr4acbc7
-
MD5
4b8a5dff60199de0777b79118fc17dd6
-
SHA1
6a3d939fddc73debd06b6d5da883eed61940fe6e
-
SHA256
28ae050b4df9f0daf6de9bf20190d908e9931bd7a4c8c0ae8044c1e502d31de2
-
SHA512
36c0a0acf6d8d3e1395b0166d9b9e05681bf31dc974b7c8f9436d17699fd2b3ba454ebce98f9d31e3ce1776321ea417a4d3113fd46325936f377a3136f0cb50f
Static task
static1
Malware Config
Extracted
trickbot
100019
rob141
65.152.201.203:443
185.56.175.122:443
46.99.175.217:443
179.189.229.254:443
46.99.175.149:443
181.129.167.82:443
216.166.148.187:443
46.99.188.223:443
128.201.76.252:443
62.99.79.77:443
60.51.47.65:443
24.162.214.166:443
45.36.99.184:443
97.83.40.67:443
184.74.99.214:443
103.105.254.17:443
62.99.76.213:443
82.159.149.52:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
28ae050b4df9f0daf6de9bf20190d908e9931bd7a4c8c0ae8044c1e502d31de2
-
Size
1.8MB
-
MD5
4b8a5dff60199de0777b79118fc17dd6
-
SHA1
6a3d939fddc73debd06b6d5da883eed61940fe6e
-
SHA256
28ae050b4df9f0daf6de9bf20190d908e9931bd7a4c8c0ae8044c1e502d31de2
-
SHA512
36c0a0acf6d8d3e1395b0166d9b9e05681bf31dc974b7c8f9436d17699fd2b3ba454ebce98f9d31e3ce1776321ea417a4d3113fd46325936f377a3136f0cb50f
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-