General

  • Target

    365046f3f745bdefbaa7591802180ddc770e2696f92f0671d2ac0e0f43541eb6

  • Size

    121KB

  • Sample

    220626-deyefsgcg7

  • MD5

    48d6ddf082788c13f8935fd38478c1b0

  • SHA1

    7a886304e4c5de8f40f5e2b401d8985ed2fd926b

  • SHA256

    365046f3f745bdefbaa7591802180ddc770e2696f92f0671d2ac0e0f43541eb6

  • SHA512

    e59ce9cf86ed4687bc63f487d8f52fa7ee3c6460ff960e7117ebdda335c40d226048cfbde950264e558216abf9c3d633b06a99430d3376cdecd61a82c7d34d0f

Score
10/10

Malware Config

Extracted

Family

trickbot

Version

1000500

Botnet

ono31

C2

5.182.210.226:443

185.62.188.10:443

185.252.144.190:443

92.223.93.153:443

51.89.115.99:443

89.32.41.126:443

5.255.96.153:443

94.156.35.216:443

80.87.195.21:443

5.34.176.184:443

62.109.1.7:443

212.80.216.181:443

5.182.210.120:443

194.5.250.166:443

185.14.30.209:443

51.89.115.103:443

85.204.116.179:443

194.5.250.168:443

190.214.13.2:449

181.140.173.186:449

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      365046f3f745bdefbaa7591802180ddc770e2696f92f0671d2ac0e0f43541eb6

    • Size

      121KB

    • MD5

      48d6ddf082788c13f8935fd38478c1b0

    • SHA1

      7a886304e4c5de8f40f5e2b401d8985ed2fd926b

    • SHA256

      365046f3f745bdefbaa7591802180ddc770e2696f92f0671d2ac0e0f43541eb6

    • SHA512

      e59ce9cf86ed4687bc63f487d8f52fa7ee3c6460ff960e7117ebdda335c40d226048cfbde950264e558216abf9c3d633b06a99430d3376cdecd61a82c7d34d0f

    Score
    1/10

MITRE ATT&CK Matrix

Tasks