Overview

overview

10

Static

static

74851f7bc1...ca.exe

windows7_x64

10

74851f7bc1...ca.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    74851f7bc1fc7c89b7a0ebde6ccd00a40d025dc74eab44a9280ee92c5a0bb6ca

  • Size

    611KB

  • Sample

    220128-v5b3kshfd7

  • MD5

    69a643800f737f841917023ae7ee9b34

  • SHA1

    effda16b763f8d6fd4f2baf7779367eabf9678ec

  • SHA256

    74851f7bc1fc7c89b7a0ebde6ccd00a40d025dc74eab44a9280ee92c5a0bb6ca

  • SHA512

    543bf57d7815be8074dd04435da1e5a460934a61b633a5a32d8b60851c7d447e5ce163a2c89d0ad91bd9884c9315df611ff31b8d3ba4dad262f74cbe768c264c

Score
10/10
trickbottrg8989bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000477

Botnet

trg8989

C2

37.44.212.148:443

185.65.202.127:443

193.37.212.246:443

193.124.191.243:443

31.148.99.63:443

94.103.91.61:443

203.23.128.179:443

179.43.147.72:443

93.123.73.192:443

51.89.115.120:443

144.91.76.214:443

46.21.153.81:443

194.5.250.98:443

190.154.203.218:449

178.183.150.169:449

200.116.199.10:449

181.113.20.186:449

187.58.56.26:449

85.11.116.194:449

177.103.240.149:449
Attributes
  • autorun
    Control:GetSystemInfo
    Name:systeminfo
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      74851f7bc1fc7c89b7a0ebde6ccd00a40d025dc74eab44a9280ee92c5a0bb6ca

    • Size

      611KB

    • MD5

      69a643800f737f841917023ae7ee9b34

    • SHA1

      effda16b763f8d6fd4f2baf7779367eabf9678ec

    • SHA256

      74851f7bc1fc7c89b7a0ebde6ccd00a40d025dc74eab44a9280ee92c5a0bb6ca

    • SHA512

      543bf57d7815be8074dd04435da1e5a460934a61b633a5a32d8b60851c7d447e5ce163a2c89d0ad91bd9884c9315df611ff31b8d3ba4dad262f74cbe768c264c

    Score
    10/10
    trickbottrg8989bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks