Analysis
-
max time kernel
125s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
20-06-2022 13:51
General
-
Target
75a5b0e0e96691e1aacf99aba23f9b2a53ef8c349a8822494b7b82c400b5a61a.exe
-
Size
454KB
-
MD5
92bdf585c0213c658e84afa9bee31e83
-
SHA1
2605300c6957335e73d527d83405e657ff3348f0
-
SHA256
75a5b0e0e96691e1aacf99aba23f9b2a53ef8c349a8822494b7b82c400b5a61a
-
SHA512
94fe04fb55a6046226222d55967a05acfa9f26e7ed5a7ce91f6e57565502399f1daad99084e9ed9d940319a124b0fd9557fb28d2082c0c2cdbba5255ca986726
Malware Config
Extracted
trickbot
100018
rob110
38.110.103.124:443
185.56.76.28:443
204.138.26.60:443
60.51.47.65:443
74.85.157.139:443
68.69.26.182:443
38.110.103.136:443
38.110.103.18:443
138.34.28.219:443
185.56.76.94:443
217.115.240.248:443
24.162.214.166:443
80.15.2.105:443
154.58.23.192:443
38.110.100.104:443
45.36.99.184:443
185.56.76.108:443
185.56.76.72:443
138.34.28.35:443
97.83.40.67:443
-
autorunName:pwgrabbName:pwgrabc
Signatures
-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
Processes
-
C:\Users\Admin\AppData\Local\Temp\75a5b0e0e96691e1aacf99aba23f9b2a53ef8c349a8822494b7b82c400b5a61a.exe"C:\Users\Admin\AppData\Local\Temp\75a5b0e0e96691e1aacf99aba23f9b2a53ef8c349a8822494b7b82c400b5a61a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
316KB
-
Filesize
316KB