Overview

overview

10

Static

static

2018-05-16...ry.exe

windows7-x64

10

2018-05-16...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2018-05-16-Trickbot-malware-binary.exe

  • Size

    166KB

  • Sample

    220905-zezs6shfb7

  • MD5

    96985dff8be2912fe2d02752b5d4a073

  • SHA1

    483d8c1e2dfe671eda6dea2fe11ab8a54f8ca0a1

  • SHA256

    fa9ad80c0977cdbfe8419d27ca9ad909d34f1737df726f4d175f6b85b0670074

  • SHA512

    3dd52536daa896efdaca8ccfc0d5e45a0f271c74b8a55762386408a6308201d502e29f40dd6481522028051c07c0f00abbf103543afe5196af1a0a3220b54d7c

  • SSDEEP

    3072:Rbx/OZbql/eMRiVUV0g0bHV6h/ke1zEpq4KaxnD9RRUQ5l/MQ85Cw5suN:RufEi2V05rVe8eJUq4Ka1RUQT0QgCwO+

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      2018-05-16-Trickbot-malware-binary.exe

    • Size

      166KB

    • MD5

      96985dff8be2912fe2d02752b5d4a073

    • SHA1

      483d8c1e2dfe671eda6dea2fe11ab8a54f8ca0a1

    • SHA256

      fa9ad80c0977cdbfe8419d27ca9ad909d34f1737df726f4d175f6b85b0670074

    • SHA512

      3dd52536daa896efdaca8ccfc0d5e45a0f271c74b8a55762386408a6308201d502e29f40dd6481522028051c07c0f00abbf103543afe5196af1a0a3220b54d7c

    • SSDEEP

      3072:Rbx/OZbql/eMRiVUV0g0bHV6h/ke1zEpq4KaxnD9RRUQ5l/MQ85Cw5suN:RufEi2V05rVe8eJUq4Ka1RUQT0QgCwO+

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks