General
-
Target
b4e0f00ac664d1c35e275a66f6e0096a8a6aa53d1a1a964719ed0474051a26fb
-
Size
350KB
-
Sample
220701-hmz1gaacg5
-
MD5
9e01d628a290b3b50305c00507c07f57
-
SHA1
9be9591dc62197e1eb58dd1381102d67fa7efb5e
-
SHA256
b4e0f00ac664d1c35e275a66f6e0096a8a6aa53d1a1a964719ed0474051a26fb
-
SHA512
3bf008e1f8f8c1702699a9009b6c6cdfb26c03bf8afed112ad13679b26d54ae797e51f7a9ba13f48e23d0aba2afefb41e4377401a3a99310bf16c124e44f0765
Static task
static1
Behavioral task
behavioral1
Sample
b4e0f00ac664d1c35e275a66f6e0096a8a6aa53d1a1a964719ed0474051a26fb.exe
Resource
win7-20220414-en
Malware Config
Extracted
trickbot
1000483
jim611
62.109.22.2:443
94.156.144.74:443
78.24.219.9:443
45.141.102.2:443
212.80.218.144:443
5.182.210.254:443
194.5.250.109:443
185.222.202.25:443
185.141.61.29:443
66.85.173.57:443
195.123.220.155:443
51.89.115.110:443
144.91.80.253:443
107.173.240.221:443
103.219.213.102:449
117.255.221.135:449
45.224.214.34:449
170.84.78.224:449
189.28.185.50:449
177.154.86.145:449
117.206.149.29:449
117.196.233.100:449
91.108.150.213:449
185.57.167.32:449
185.189.122.68:449
177.105.242.229:449
190.214.13.2:449
181.140.173.186:449
181.113.28.162:449
181.129.104.139:449
190.142.200.108:449
190.72.235.47:449
181.129.134.18:449
181.196.207.202:449
181.113.28.146:449
181.112.157.42:449
45.238.37.14:449
190.146.176.67:449
181.129.167.82:449
103.255.10.24:449
117.204.253.33:449
117.197.119.219:449
-
autorunName:pwgrab
Targets
-
-
Target
b4e0f00ac664d1c35e275a66f6e0096a8a6aa53d1a1a964719ed0474051a26fb
-
Size
350KB
-
MD5
9e01d628a290b3b50305c00507c07f57
-
SHA1
9be9591dc62197e1eb58dd1381102d67fa7efb5e
-
SHA256
b4e0f00ac664d1c35e275a66f6e0096a8a6aa53d1a1a964719ed0474051a26fb
-
SHA512
3bf008e1f8f8c1702699a9009b6c6cdfb26c03bf8afed112ad13679b26d54ae797e51f7a9ba13f48e23d0aba2afefb41e4377401a3a99310bf16c124e44f0765
-
Trickbot x86 loader
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-