Overview

overview

10

Static

static

bbe02e749c...41.exe

windows7_x64

10

bbe02e749c...41.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbe02e749c9d0d47527a268418fd354f4bf7351657e25cdc5e7dd79ee5a32b41

  • Size

    874KB

  • Sample

    220128-yczjyscbe7

  • MD5

    5e0303742e801bb71ba15f5895acbe8c

  • SHA1

    91270cb84c2a40ed488b4ca363f1db06b7edc589

  • SHA256

    bbe02e749c9d0d47527a268418fd354f4bf7351657e25cdc5e7dd79ee5a32b41

  • SHA512

    63ea8a5dfdc1022e4038985a27462c41b52375e0177167a8f5ca8a785ad5bc0b33a4cf026328343743c7db56900bdef9a981bd0cd01e64f2e14181a9b211a61d

Score
10/10
trickbottrg88889bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000477

Botnet

trg88889

C2

37.44.212.148:443

185.65.202.127:443

193.37.212.246:443

193.124.191.243:443

31.148.99.63:443

94.103.91.61:443

203.23.128.179:443

179.43.147.72:443

93.123.73.192:443

51.89.115.120:443

144.91.76.214:443

46.21.153.81:443

194.5.250.98:443

190.154.203.218:449

178.183.150.169:449

200.116.199.10:449

181.113.20.186:449

187.58.56.26:449

85.11.116.194:449

177.103.240.149:449
Attributes
  • autorun
    Control:GetSystemInfo
    Name:systeminfo
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      bbe02e749c9d0d47527a268418fd354f4bf7351657e25cdc5e7dd79ee5a32b41

    • Size

      874KB

    • MD5

      5e0303742e801bb71ba15f5895acbe8c

    • SHA1

      91270cb84c2a40ed488b4ca363f1db06b7edc589

    • SHA256

      bbe02e749c9d0d47527a268418fd354f4bf7351657e25cdc5e7dd79ee5a32b41

    • SHA512

      63ea8a5dfdc1022e4038985a27462c41b52375e0177167a8f5ca8a785ad5bc0b33a4cf026328343743c7db56900bdef9a981bd0cd01e64f2e14181a9b211a61d

    Score
    10/10
    trickbottrg88889bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks