Overview

overview

10

Static

static

10

cc3879487d...60.exe

windows7-x64

10

cc3879487d...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cc3879487d24c8fc3961e0d0dce1b0e1d456a2a6ac745f04223c985c64529760

  • Size

    1002KB

  • Sample

    240409-cyssmsbg75

  • MD5

    b50a57f4416f6837a2945996e6b63a80

  • SHA1

    de6fe8a4dbbf64363f0cf976e5a9b5e00951abf9

  • SHA256

    cc3879487d24c8fc3961e0d0dce1b0e1d456a2a6ac745f04223c985c64529760

  • SHA512

    f03fd534dd9cbec5969bd7868e59de594c2720a53111b1ab2f24f351c9a42424602aaadc9fb7b84b6d71db1cc8de19c6f6016d862f54b649fd58cc731a2084ca

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQGCZLFdGm1StE10/ZSeE7Lu:E5aIwC+Agr6S/FFCwrG

Score
10/10
kpottrickbotbankerevasionstealertrojan

Malware Config

Targets

    • Target

      cc3879487d24c8fc3961e0d0dce1b0e1d456a2a6ac745f04223c985c64529760

    • Size

      1002KB

    • MD5

      b50a57f4416f6837a2945996e6b63a80

    • SHA1

      de6fe8a4dbbf64363f0cf976e5a9b5e00951abf9

    • SHA256

      cc3879487d24c8fc3961e0d0dce1b0e1d456a2a6ac745f04223c985c64529760

    • SHA512

      f03fd534dd9cbec5969bd7868e59de594c2720a53111b1ab2f24f351c9a42424602aaadc9fb7b84b6d71db1cc8de19c6f6016d862f54b649fd58cc731a2084ca

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQGCZLFdGm1StE10/ZSeE7Lu:E5aIwC+Agr6S/FFCwrG

    Score
    10/10
    kpottrickbotbankerevasionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks