Overview

overview

10

Static

static

3

1e0215f67f...53.exe

windows7-x64

10

1e0215f67f...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a312c85ae310e00a97782de39be3b0d318cff77e3d9db9519f34534bf39fe08

  • Size

    286KB

  • Sample

    240417-p9dt3shh3z

  • MD5

    7c44f2c7c4bc31210529002b26dcb708

  • SHA1

    5be952c5c3d32d992249d703ed7b6e088c75ff6c

  • SHA256

    0a312c85ae310e00a97782de39be3b0d318cff77e3d9db9519f34534bf39fe08

  • SHA512

    42c9bacbf706666e24c22d656c10db23c37e26ed05fe133f939c90c3e13815edc5f57c1b9405062f5bf9cf247248f2820ee06b7fa908540dad6989547ff7bc32

  • SSDEEP

    6144:ceMi6qigWnInGEBLgCgJfum9hVpB9AKCNaLU7FlNi0dKCz4jXb6yHdq2UY6ijmis:EixknIGYUb9lPAKCNhlNi0kCUbb6yHIT

Score
10/10
trickbotxml1bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000512

Botnet

xml1

C2

95.171.16.42:443

185.90.61.9:443

5.1.81.68:443

185.99.2.65:443

134.119.191.11:443

85.204.116.100:443

78.108.216.47:443

51.81.112.144:443

194.5.250.121:443

185.14.31.104:443

185.99.2.66:443

107.175.72.141:443

192.3.247.123:443

134.119.191.21:443

85.204.116.216:443

91.235.129.20:443

181.129.104.139:449

181.112.157.42:449

181.129.134.18:449

131.161.253.190:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      1e0215f67fb7b02bc44f33bf6a5b884c3061cbeb38e0150b559635458951fa53.exe

    • Size

      396KB

    • MD5

      8503ea92f4c9941ee3295978729d98ba

    • SHA1

      d04dfbc5b1335c8408ffb5c58bd966791f748ad3

    • SHA256

      1e0215f67fb7b02bc44f33bf6a5b884c3061cbeb38e0150b559635458951fa53

    • SHA512

      a5dade77d81f3fc49b46d828ea653d55b921e8b65b455dd0a1fa7eba7880b3a86deff0aafd21276a86eb95be948ab61da9771343ccbc24164b31c3a5b18edaa5

    • SSDEEP

      6144:omPt4BMS4GhUjjF0CBTTFCIRroPHQJ/s5xi8uwytwnhJCAfYrewWvoKMyDftxQib:ZPt4BMsOvpAHQJ0G8CAfWWvo1im

    Score
    10/10
    trickbotxml1bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks