Overview

overview

10

Static

static

3

0f575c5c33...18.exe

windows7-x64

10

0f575c5c33...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f575c5c33b03bfe52048b34260bf830_JaffaCakes118

  • Size

    740KB

  • Sample

    240503-bn4xgsde44

  • MD5

    0f575c5c33b03bfe52048b34260bf830

  • SHA1

    fedaafe20cef6373e2329496fb28255b3a16e720

  • SHA256

    432b4cbcdfaafd525d07e05fc07149098103e34c3ee6d423d1596e5342725d94

  • SHA512

    44372d1e7a43ed0868e6a0bf7caee3e3bee3224003acdbfc697891c22d0963e1ff49b8828170f95bd260e107f3b545d9d308dacd68dab93376ad7fbfcb687013

  • SSDEEP

    12288:53X+nxll0T7S4d+XMk4Fy2QHAC35lduV89Sr3ZUYHEUjROzfDa05lzCMNJMP0iLD:RuxV4d+XMkCyLzldE89tYHvVO3aH0iLD

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      0f575c5c33b03bfe52048b34260bf830_JaffaCakes118

    • Size

      740KB

    • MD5

      0f575c5c33b03bfe52048b34260bf830

    • SHA1

      fedaafe20cef6373e2329496fb28255b3a16e720

    • SHA256

      432b4cbcdfaafd525d07e05fc07149098103e34c3ee6d423d1596e5342725d94

    • SHA512

      44372d1e7a43ed0868e6a0bf7caee3e3bee3224003acdbfc697891c22d0963e1ff49b8828170f95bd260e107f3b545d9d308dacd68dab93376ad7fbfcb687013

    • SSDEEP

      12288:53X+nxll0T7S4d+XMk4Fy2QHAC35lduV89Sr3ZUYHEUjROzfDa05lzCMNJMP0iLD:RuxV4d+XMkCyLzldE89tYHvVO3aH0iLD

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks