Overview

overview

10

Static

static

da75bffa69...a6.exe

windows7_x64

10

da75bffa69...a6.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da75bffa697de8d12806a2141cf2099a2c39f0b5bc259586fa22911082513aa6

  • Size

    296KB

  • Sample

    220701-g71xtsfham

  • MD5

    884b9ba2a87f49828659b2c5a01c0dae

  • SHA1

    9ab732009d02f9b82ec02e4dbbd92106652ddb77

  • SHA256

    da75bffa697de8d12806a2141cf2099a2c39f0b5bc259586fa22911082513aa6

  • SHA512

    810dc40fe36179abec96a4cce45e340710cab605b0c2eb89a57679c75318c1c58003c59db1beed3d96af872a481a6b84b01b8fe7833db6808744f2154afba203

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      da75bffa697de8d12806a2141cf2099a2c39f0b5bc259586fa22911082513aa6

    • Size

      296KB

    • MD5

      884b9ba2a87f49828659b2c5a01c0dae

    • SHA1

      9ab732009d02f9b82ec02e4dbbd92106652ddb77

    • SHA256

      da75bffa697de8d12806a2141cf2099a2c39f0b5bc259586fa22911082513aa6

    • SHA512

      810dc40fe36179abec96a4cce45e340710cab605b0c2eb89a57679c75318c1c58003c59db1beed3d96af872a481a6b84b01b8fe7833db6808744f2154afba203

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks