General

  • Target

    b43be2c8aebd65260f61868afdcbc54c63006302fe3e364c94e3c0b105b459dc

  • Size

    205KB

  • MD5

    57e457058c8d921f5a6331b604ed53d2

  • SHA1

    87fbe909120fb3cdaa8f7156d0eb13daaf398c18

  • SHA256

    b43be2c8aebd65260f61868afdcbc54c63006302fe3e364c94e3c0b105b459dc

  • SHA512

    6e7de1eeaef54b7ec0117d8420d55ecc0a36ebb28f6ed598d1e265610e7f2e600d5c9688c2a048f41498368c3c09ffc5cf7bf36989f96270fa6367eb4377feba

  • SSDEEP

    6144:r5VztJgfZzCBQM/+DLLidZtJfNkeZ74mE:r3zrQzCBQbPLu9fN4Z

Score
10/10

Malware Config

Signatures

  • Trickbot family
  • Templ.dll packer 1 IoCs

    Detects Templ.dll packer which usually loads Trickbot.

Files

  • b43be2c8aebd65260f61868afdcbc54c63006302fe3e364c94e3c0b105b459dc
    .dll regsvr32 windows x86

    38a4fba5c4924fc60fcfe07eaa7119cb


    Headers

    Imports

    Exports

    Sections