Overview

overview

10

Static

static

3

1e0215f67f...53.exe

windows7-x64

10

1e0215f67f...53.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9cd1743cbab74276ca77c7d029a2f331343203791870abae12cf26f858d17053

  • Size

    286KB

  • Sample

    240417-ql5tbshb94

  • MD5

    e98dba341ba75ddb8e2f330ccc59d544

  • SHA1

    d084bc47af84b62540116e006dad396ab5a8a2bd

  • SHA256

    9cd1743cbab74276ca77c7d029a2f331343203791870abae12cf26f858d17053

  • SHA512

    6bdab5b6e6ba92b33503b460a4db9839564fae20b6d91277752e775cf95fdac25f472bdc379882ad82a0af187fd12e0e91ed6985c3f3302c76a555ccc5652140

  • SSDEEP

    6144:NHn5KhTTLZXfaqLJQxKT7Tu9fLf/raZzwMvvzVUcjXc7ovHi3dfzIN6oY:/KJL/QMa9fLbQzwMvvzVU0XPHCJws

Score
10/10
trickbotxml1bankertrojan

Malware Config

Extracted

Family

trickbot

Version

1000512

Botnet

xml1

C2

95.171.16.42:443

185.90.61.9:443

5.1.81.68:443

185.99.2.65:443

134.119.191.11:443

85.204.116.100:443

78.108.216.47:443

51.81.112.144:443

194.5.250.121:443

185.14.31.104:443

185.99.2.66:443

107.175.72.141:443

192.3.247.123:443

134.119.191.21:443

85.204.116.216:443

91.235.129.20:443

181.129.104.139:449

181.112.157.42:449

181.129.134.18:449

131.161.253.190:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      1e0215f67fb7b02bc44f33bf6a5b884c3061cbeb38e0150b559635458951fa53.exe

    • Size

      396KB

    • MD5

      8503ea92f4c9941ee3295978729d98ba

    • SHA1

      d04dfbc5b1335c8408ffb5c58bd966791f748ad3

    • SHA256

      1e0215f67fb7b02bc44f33bf6a5b884c3061cbeb38e0150b559635458951fa53

    • SHA512

      a5dade77d81f3fc49b46d828ea653d55b921e8b65b455dd0a1fa7eba7880b3a86deff0aafd21276a86eb95be948ab61da9771343ccbc24164b31c3a5b18edaa5

    • SSDEEP

      6144:omPt4BMS4GhUjjF0CBTTFCIRroPHQJ/s5xi8uwytwnhJCAfYrewWvoKMyDftxQib:ZPt4BMsOvpAHQJ0G8CAfWWvo1im

    Score
    10/10
    trickbotxml1bankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks