Overview

overview

10

Static

static

3

NEAS.d4556...50.exe

windows7-x64

10

NEAS.d4556...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d4556afb877184a023e522c7ff762550.exe

  • Size

    613KB

  • Sample

    231115-h2phaaeb32

  • MD5

    d4556afb877184a023e522c7ff762550

  • SHA1

    84134a9035e1b3df8b3b850d4a4f78b8425824ce

  • SHA256

    8d6a0bc1fd32d4472a02505704e3ea4b5385035b2260665a73e87bf1efea9f65

  • SHA512

    3490f9d316af9a04ec860adec203b771553b8d4807729322d9b761d61e8d4c50b8b404a1574958e9bd1d54dac0c7e98d130f05630ad3d73ab7639ed188975c1c

  • SSDEEP

    6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuXCyW8bQQG7NpAv5Zk:zJB0lh5aILwtFPCfmAUtxjEG7NpAv5m

Score
10/10
trickbotbankerevasiontrojan

Malware Config

Targets

    • Target

      NEAS.d4556afb877184a023e522c7ff762550.exe

    • Size

      613KB

    • MD5

      d4556afb877184a023e522c7ff762550

    • SHA1

      84134a9035e1b3df8b3b850d4a4f78b8425824ce

    • SHA256

      8d6a0bc1fd32d4472a02505704e3ea4b5385035b2260665a73e87bf1efea9f65

    • SHA512

      3490f9d316af9a04ec860adec203b771553b8d4807729322d9b761d61e8d4c50b8b404a1574958e9bd1d54dac0c7e98d130f05630ad3d73ab7639ed188975c1c

    • SSDEEP

      6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuXCyW8bQQG7NpAv5Zk:zJB0lh5aILwtFPCfmAUtxjEG7NpAv5m

    Score
    10/10
    trickbotbankerevasiontrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks