Overview

overview

10

Static

static

3ff628ab4a...3e.exe

windows7_x64

1

3ff628ab4a...3e.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ff628ab4a53cb24b53120890bdd6847e962bc6a42f5d4d6aed1e23b38850a3e

  • Size

    363KB

  • Sample

    220630-wdcepsefal

  • MD5

    0dc94f956e517ea69f4a3cd623bebb59

  • SHA1

    0c8791cc4ef4e78cbbce018a0774eeb8e5bb3e76

  • SHA256

    3ff628ab4a53cb24b53120890bdd6847e962bc6a42f5d4d6aed1e23b38850a3e

  • SHA512

    6f2c2c23d4b55b01e7fbc2eab602c0265adc27026b9e587bef7e0003686c43e2639637623dd40be38e5fc9f798024c5cedc3a8dc762d9a4c166616c29cf86fea

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      3ff628ab4a53cb24b53120890bdd6847e962bc6a42f5d4d6aed1e23b38850a3e

    • Size

      363KB

    • MD5

      0dc94f956e517ea69f4a3cd623bebb59

    • SHA1

      0c8791cc4ef4e78cbbce018a0774eeb8e5bb3e76

    • SHA256

      3ff628ab4a53cb24b53120890bdd6847e962bc6a42f5d4d6aed1e23b38850a3e

    • SHA512

      6f2c2c23d4b55b01e7fbc2eab602c0265adc27026b9e587bef7e0003686c43e2639637623dd40be38e5fc9f798024c5cedc3a8dc762d9a4c166616c29cf86fea

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks