Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

4bbc55814e...c9.exe

windows7_x64

10

4bbc55814e...c9.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bbc55814ecf0878d938071a8c8eb9d1e28d4b54eb4172de60403436590fd2c9

  • Size

    191KB

  • Sample

    220712-kwrfssbafn

  • MD5

    60bdd4902b48e69b25eeee4df19ad417

  • SHA1

    2848018b904ef4faa2dabbb47c3816c3fb051d46

  • SHA256

    4bbc55814ecf0878d938071a8c8eb9d1e28d4b54eb4172de60403436590fd2c9

  • SHA512

    673cc67fc3bf238aa0e8bcf7fa9df60887aac380ad023a1710d997fc4ff5a6d6473992ac00a6b912a2ddbf3296f10f14784dda0eea401d130545c67052e139be

Score
10/10
trickbotbankerevasiontrojan

Malware Config

Targets

    • Target

      4bbc55814ecf0878d938071a8c8eb9d1e28d4b54eb4172de60403436590fd2c9

    • Size

      191KB

    • MD5

      60bdd4902b48e69b25eeee4df19ad417

    • SHA1

      2848018b904ef4faa2dabbb47c3816c3fb051d46

    • SHA256

      4bbc55814ecf0878d938071a8c8eb9d1e28d4b54eb4172de60403436590fd2c9

    • SHA512

      673cc67fc3bf238aa0e8bcf7fa9df60887aac380ad023a1710d997fc4ff5a6d6473992ac00a6b912a2ddbf3296f10f14784dda0eea401d130545c67052e139be

    Score
    10/10
    trickbotbankerevasiontrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Stops running service(s)

      evasion

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks