Overview

overview

10

Static

static

10

240425-fk3...ed.zip

windows11-21h2-x64

1

ed0dff21d7...95.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    240425-fk3mgafh5y_pw_infected.zip

  • Size

    745KB

  • Sample

    240425-yw88haea81

  • MD5

    375f80aab9541b5393db255a2b60b882

  • SHA1

    269709c0ea2b575d71efa2f38747ad3922fdcb4b

  • SHA256

    62694bbe5ad0c4c86a70aa3b5b1040ce46f22d0a99dd24f888d26ca40963664c

  • SHA512

    14a8fe74d25634f3f0857198be52f753690cc880b1a3ace2ef3242361fc0049d5689ba868ea6c5eb5fa0c15da21c50c9513d3c829cfe37d00ef2af27dff5f31d

  • SSDEEP

    12288:92mOocMZ/1k1NYtCoUxr6+23mYw+Y9Xfin4JPJ+nTYajDyRDBD+RmUTwf+QuwwQ8:AH6MNkdU1qvYVUqBkh/XTFQuJQOUY

Score
10/10
kpottrickbotbankerstealertrojan

Malware Config

Targets

    • Target

      240425-fk3mgafh5y_pw_infected.zip

    • Size

      745KB

    • MD5

      375f80aab9541b5393db255a2b60b882

    • SHA1

      269709c0ea2b575d71efa2f38747ad3922fdcb4b

    • SHA256

      62694bbe5ad0c4c86a70aa3b5b1040ce46f22d0a99dd24f888d26ca40963664c

    • SHA512

      14a8fe74d25634f3f0857198be52f753690cc880b1a3ace2ef3242361fc0049d5689ba868ea6c5eb5fa0c15da21c50c9513d3c829cfe37d00ef2af27dff5f31d

    • SSDEEP

      12288:92mOocMZ/1k1NYtCoUxr6+23mYw+Y9Xfin4JPJ+nTYajDyRDBD+RmUTwf+QuwwQ8:AH6MNkdU1qvYVUqBkh/XTFQuJQOUY

    Score
    1/10
    behavioral1

    • Target

      ed0dff21d7247a770dec0768a3da95fdd38bf9e0ca2673ab8cabfcc2352f7b95

    • Size

      1.2MB

    • MD5

      02c54b72e71ea65747180a14c84a2ca1

    • SHA1

      0ff7516737a6790bbe4875a8a5c98fe20a1d1576

    • SHA256

      ed0dff21d7247a770dec0768a3da95fdd38bf9e0ca2673ab8cabfcc2352f7b95

    • SHA512

      2aa8bfa5f1052a19247de879a1e3b14b81ffede11214ae047c3df4bf0477697a61c9392ed1cbab165ad682136db8ca23ab358a57223765e458fe079d4188b5e0

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQGCZLFdGm1Sd8zG7u75+FmVf69AlRmRHJ:E5aIwC+Agr6S/FEAGsji6lRip

    Score
    10/10
    kpottrickbotbankerstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

    behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks