General

  • Target

    ec768e73972f6d571a3df58c9e097d3227b2508d96b5d20f1078cfebf1de38cf

  • Size

    1016KB

  • Sample

    240424-1611zsaf2y

  • MD5

    440d89a8f34c73d5131ea87d665451f0

  • SHA1

    afb09e49a1ba812bd394325d6bbcdc5ffd323afe

  • SHA256

    ec768e73972f6d571a3df58c9e097d3227b2508d96b5d20f1078cfebf1de38cf

  • SHA512

    494dd4204e4d1415947ca64108ca953c42d399b49e42563648c8b477ac7a9831e0c555c769c65f22e0558d923fab5eea7d6214c45da65cd781799e9cba5ac66e

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQGCZLFdGm1StE+Jp7y:E5aIwC+Agr6S/FFl

Malware Config

Targets

    • Target

      ec768e73972f6d571a3df58c9e097d3227b2508d96b5d20f1078cfebf1de38cf

    • Size

      1016KB

    • MD5

      440d89a8f34c73d5131ea87d665451f0

    • SHA1

      afb09e49a1ba812bd394325d6bbcdc5ffd323afe

    • SHA256

      ec768e73972f6d571a3df58c9e097d3227b2508d96b5d20f1078cfebf1de38cf

    • SHA512

      494dd4204e4d1415947ca64108ca953c42d399b49e42563648c8b477ac7a9831e0c555c769c65f22e0558d923fab5eea7d6214c45da65cd781799e9cba5ac66e

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQGCZLFdGm1StE+Jp7y:E5aIwC+Agr6S/FFl

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks