Overview

overview

10

Static

static

baa80c291a...ca.exe

windows7-x64

10

baa80c291a...ca.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baa80c291a9fbc8c5d70a0183385bed0b90d2792b8e5130cd399237d364c1fca

  • Size

    422KB

  • Sample

    220724-rwgpxsffe9

  • MD5

    2fa5b98de882a2c9015efdcfdd88be65

  • SHA1

    0a454b220eea65bd757acb937c0ed2e745e148fd

  • SHA256

    baa80c291a9fbc8c5d70a0183385bed0b90d2792b8e5130cd399237d364c1fca

  • SHA512

    9e3a5483acaf0cb97eff62fad04c8c6887a1e660af6e54f18304dd9905d9dd4f601f1df016840a438f1c85cfc260537c562d0def99159082cf525d93456f3b66

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      baa80c291a9fbc8c5d70a0183385bed0b90d2792b8e5130cd399237d364c1fca

    • Size

      422KB

    • MD5

      2fa5b98de882a2c9015efdcfdd88be65

    • SHA1

      0a454b220eea65bd757acb937c0ed2e745e148fd

    • SHA256

      baa80c291a9fbc8c5d70a0183385bed0b90d2792b8e5130cd399237d364c1fca

    • SHA512

      9e3a5483acaf0cb97eff62fad04c8c6887a1e660af6e54f18304dd9905d9dd4f601f1df016840a438f1c85cfc260537c562d0def99159082cf525d93456f3b66

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Deletes itself

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks