Resubmissions

09-03-2023 03:48

230309-ecttxsad62 10

27-09-2022 00:13

220927-ahr53adchr 10

20-06-2022 00:12

220620-ag7jcsbbc2 10

17-04-2022 22:07

220417-11wjbachfl 10

21-12-2020 07:48

201221-ynmnr7c9la 10

21-12-2020 06:38

201221-d18mx5drca 10

General

  • Target

    4ea9d70cc742f466a01bf1405a8f2682fff7691c5fc16a3f3512fd8cf64991bb.bin

  • Size

    138KB

  • Sample

    230309-ecttxsad62

  • MD5

    8d3a5bf287aa12434710cd33c0b3f1c2

  • SHA1

    db84020c45bebf2f71a335b1715d1d6dd6af24fe

  • SHA256

    4ea9d70cc742f466a01bf1405a8f2682fff7691c5fc16a3f3512fd8cf64991bb

  • SHA512

    821b35d4b871ead5d6e405fe17435ce5a5739c31f87b520dfc054ea2b17a11a5890860978842bf7cc68622c39ea12eaec596e2a0a4e9a181a56a9d1f8fd77dd0

  • SSDEEP

    3072:miVBXpXMrQ3zgi7VcpuJT8SojxuArQLNXvLiJR+XCAhZ:miar6zgihcpiroVuArQLNXvLO2d

Score
10/10

Malware Config

Extracted

Family

trickbot

Version

100005

Botnet

rob16

C2

94.45.210.13:443

187.62.208.234:449

116.90.224.158:449

89.40.206.116:449

49.156.41.74:449

80.242.220.146:449

177.221.108.198:449

186.209.104.74:449

103.98.129.222:449

41.243.29.182:449

178.134.55.190:449

196.45.140.146:449

185.141.10.26:449

103.250.70.163:443

181.196.24.6:443

103.87.25.220:443

118.69.133.4:443

103.52.47.20:449

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      4ea9d70cc742f466a01bf1405a8f2682fff7691c5fc16a3f3512fd8cf64991bb.bin

    • Size

      138KB

    • MD5

      8d3a5bf287aa12434710cd33c0b3f1c2

    • SHA1

      db84020c45bebf2f71a335b1715d1d6dd6af24fe

    • SHA256

      4ea9d70cc742f466a01bf1405a8f2682fff7691c5fc16a3f3512fd8cf64991bb

    • SHA512

      821b35d4b871ead5d6e405fe17435ce5a5739c31f87b520dfc054ea2b17a11a5890860978842bf7cc68622c39ea12eaec596e2a0a4e9a181a56a9d1f8fd77dd0

    • SSDEEP

      3072:miVBXpXMrQ3zgi7VcpuJT8SojxuArQLNXvLiJR+XCAhZ:miar6zgihcpiroVuArQLNXvLO2d

    Score
    1/10

MITRE ATT&CK Matrix

Tasks