Overview

overview

10

Static

static

win10-standard

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a4c3a363810627b849d4d45acb3410314557dec

  • Size

    544KB

  • Sample

    221007-agla5abdbr

  • MD5

    88b43fd6bddca55a719cbfa665a71560

  • SHA1

    2a4c3a363810627b849d4d45acb3410314557dec

  • SHA256

    1aca6791f40a8b5aecd8b3e8b639295c319fe340c1afca7a67e38e9c5de1f0c4

  • SHA512

    972eea06a5f69a4b54fb8938c597a81de14a4ab6f5d7de80fda4917b1aa221d006c79ae77210102cd13cff9f8cf6512238b5279d59ad495f905687b0c47bb460

  • SSDEEP

    12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYUpXdzH2ABoCbaCgpT:ZXQUIsQpMsequrmGG9H2aadpT

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      2a4c3a363810627b849d4d45acb3410314557dec

    • Size

      544KB

    • MD5

      88b43fd6bddca55a719cbfa665a71560

    • SHA1

      2a4c3a363810627b849d4d45acb3410314557dec

    • SHA256

      1aca6791f40a8b5aecd8b3e8b639295c319fe340c1afca7a67e38e9c5de1f0c4

    • SHA512

      972eea06a5f69a4b54fb8938c597a81de14a4ab6f5d7de80fda4917b1aa221d006c79ae77210102cd13cff9f8cf6512238b5279d59ad495f905687b0c47bb460

    • SSDEEP

      12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYUpXdzH2ABoCbaCgpT:ZXQUIsQpMsequrmGG9H2aadpT

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks