General

  • Target
    VirusShare_01b55404de50bd1a56343b2f316ff88d
  • Size 121KB
  • Sample240505-e5mw3sfa6x
  • SHA256 69bd652ace6469311a49a12f66bbbc691bdfc69aba958dd02d928464cbb46609
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • trickbot

Version
  • 1000501

Botnet
  • ono33

C2
  • 5.182.210.226:443

  • 5.182.210.120:443

  • 185.65.202.183:443

  • 212.80.217.243:443

  • 85.143.218.249:443

  • 194.5.250.178:443

  • 198.15.119.121:443

  • 107.175.87.142:443

  • 185.14.31.72:443

  • 188.165.62.2:443

  • 194.5.250.179:443

  • 198.15.119.71:443

  • 185.14.29.4:443

  • 185.99.2.202:443

  • 192.3.193.162:443

  • 89.191.234.89:443

  • 195.54.32.12:443

  • 31.131.21.30:443

  • 5.34.177.194:443

  • 190.214.13.2:449

Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target
      VirusShare_01b55404de50bd1a56343b2f316ff88d
    • Size 121KB
    • SHA256 69bd652ace6469311a49a12f66bbbc691bdfc69aba958dd02d928464cbb46609
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Matrix

Tasks