General
-
Target
229d33d05887ac47da1ebffc1ccab24d6e144354aaccb2f581122f765e49a12c
-
Size
853KB
-
Sample
220128-wtak2sadd2
-
MD5
50bd5097a5a731f033d62c64cd732f30
-
SHA1
d0d761b5a1745838c558ee17c547eb3fdfd25f71
-
SHA256
229d33d05887ac47da1ebffc1ccab24d6e144354aaccb2f581122f765e49a12c
-
SHA512
8fdca77c73b45dc912d9d89a7c927be8af2b8e86530da8be062f0c3cde07369f60d4cc92041fe99fed0e475e5ab53b3de0d4d061ed9f4c832acca2fcc1b2df32
Static task
static1
Behavioral task
behavioral1
Sample
229d33d05887ac47da1ebffc1ccab24d6e144354aaccb2f581122f765e49a12c.exe
Resource
win7-en-20211208
Malware Config
Extracted
trickbot
1000479
trgt98888
192.3.104.46:443
23.94.233.210:443
172.82.152.126:443
192.3.247.11:443
202.29.215.114:449
-
autorunControl:GetSystemInfoName:systeminfoName:pwgrab
Targets
-
-
Target
229d33d05887ac47da1ebffc1ccab24d6e144354aaccb2f581122f765e49a12c
-
Size
853KB
-
MD5
50bd5097a5a731f033d62c64cd732f30
-
SHA1
d0d761b5a1745838c558ee17c547eb3fdfd25f71
-
SHA256
229d33d05887ac47da1ebffc1ccab24d6e144354aaccb2f581122f765e49a12c
-
SHA512
8fdca77c73b45dc912d9d89a7c927be8af2b8e86530da8be062f0c3cde07369f60d4cc92041fe99fed0e475e5ab53b3de0d4d061ed9f4c832acca2fcc1b2df32
-
Trickbot x86 loader
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
Executes dropped EXE
-
Loads dropped DLL
-