Overview

overview

10

Static

static

3

ce6e35058e...18.exe

windows7-x64

10

ce6e35058e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce6e35058ecdf6f8d78f57ea67d3ad9f_JaffaCakes118

  • Size

    192KB

  • Sample

    240405-j9ajrsfg36

  • MD5

    ce6e35058ecdf6f8d78f57ea67d3ad9f

  • SHA1

    369dea67177511239764fac088fc2f8fc03cecd1

  • SHA256

    9c02868816061a23054a0fbc8e7b4a1992570dc9a307b0701fb74cc38cf9e685

  • SHA512

    355a1f1f861e29f718fc9a6f3f3581a78cfaa85ed03b65c02f75f6e48df92b3307d6ce108c35278c823443f1d00c42df866e2cb7bd0e82e21b35f9b9265d6e37

  • SSDEEP

    3072:Z+gDsLmB3tO3fcOfXUmdDPEilXg+tLpGXXYtTe/IMm4I4mqrqwxWjA3:Qkmg3tO1XJdvxgGpGXSewM/IcxH

Score
10/10
trickbotbankerevasiontrojan

Malware Config

Targets

    • Target

      ce6e35058ecdf6f8d78f57ea67d3ad9f_JaffaCakes118

    • Size

      192KB

    • MD5

      ce6e35058ecdf6f8d78f57ea67d3ad9f

    • SHA1

      369dea67177511239764fac088fc2f8fc03cecd1

    • SHA256

      9c02868816061a23054a0fbc8e7b4a1992570dc9a307b0701fb74cc38cf9e685

    • SHA512

      355a1f1f861e29f718fc9a6f3f3581a78cfaa85ed03b65c02f75f6e48df92b3307d6ce108c35278c823443f1d00c42df866e2cb7bd0e82e21b35f9b9265d6e37

    • SSDEEP

      3072:Z+gDsLmB3tO3fcOfXUmdDPEilXg+tLpGXXYtTe/IMm4I4mqrqwxWjA3:Qkmg3tO1XJdvxgGpGXSewM/IcxH

    Score
    10/10
    trickbotbankerevasiontrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks