Overview

overview

10

Static

static

10

77bdb4717d...dd.exe

windows7_x64

10

77bdb4717d...dd.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    77bdb4717d88e1e591f9d472aeae0ee839269a6b468b474b06d16936c85210dd

  • Size

    123KB

  • Sample

    220701-dqlvssbeb9

  • MD5

    9a79fea9eac7b0e7ac7b53b040113ae8

  • SHA1

    bb16b236e4b4796504050c37957f39017c28e6e9

  • SHA256

    77bdb4717d88e1e591f9d472aeae0ee839269a6b468b474b06d16936c85210dd

  • SHA512

    afff165d7eb3ce3126ded4ce429d61dc04b18a3d8757ef1665addff26756402204641447f005ac8fe77e76e06aa4418029157cf9212f48a530f92682280d5de3

Score
10/10
trickbotwecan14bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000496

Botnet

wecan14

C2

5.182.210.226:443

85.204.116.128:443

185.62.188.34:443

5.2.78.43:443

79.143.31.246:443

93.189.46.122:443

31.184.254.50:443

195.123.217.226:443

185.99.2.117:443

104.168.96.113:443

188.165.62.36:443

5.182.210.246:443

5.2.78.98:443

185.142.99.8:443

185.252.144.135:443

82.146.62.52:443

212.109.220.111:443

91.235.129.25:443

5.182.210.109:443

198.8.91.10:443
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      77bdb4717d88e1e591f9d472aeae0ee839269a6b468b474b06d16936c85210dd

    • Size

      123KB

    • MD5

      9a79fea9eac7b0e7ac7b53b040113ae8

    • SHA1

      bb16b236e4b4796504050c37957f39017c28e6e9

    • SHA256

      77bdb4717d88e1e591f9d472aeae0ee839269a6b468b474b06d16936c85210dd

    • SHA512

      afff165d7eb3ce3126ded4ce429d61dc04b18a3d8757ef1665addff26756402204641447f005ac8fe77e76e06aa4418029157cf9212f48a530f92682280d5de3

    Score
    10/10
    trickbotwecan14bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks