trickbot | 8458b8f86d423534a2c5e4e23aa033d8ae7824f9f0bf096e059b4d1236958851 | Triage

Submit
Reports

Overview

overview

Static

static

3

18b3ffabad...18.exe

windows7-x64

18b3ffabad...18.exe

windows10-2004-x64

Sharing

General

Target

18b3ffabad9644d95e64cca21d2ba064_JaffaCakes118
Size

443KB
Sample

240505-wdfr5agd8w
MD5

18b3ffabad9644d95e64cca21d2ba064
SHA1

c00961850fb546176dc69cecf3ab0cf5598225f6
SHA256

8458b8f86d423534a2c5e4e23aa033d8ae7824f9f0bf096e059b4d1236958851
SHA512

f5a2f9eafef3a1e23c433ef6ee1bd02a8d8440b5086b443cf52b9fc1d2b91b57f657080ed57a1f6ff4a27da75b88d4f7a32a5a2b35860b85df265e35b3cdb35c
SSDEEP

6144:Z6ohM6XPOgAtvl17gHp094WQaa4gL68sv/Abr:ZBhhPktvlFgH8OLA/

Score

10^/10

trickbot banker evasion execution trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

18b3ffabad9644d95e64cca21d2ba064_JaffaCakes118.exe

Resource

win7-20240221-en

trickbot banker evasion execution trojan

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

18b3ffabad9644d95e64cca21d2ba064_JaffaCakes118.exe

Resource

win10v2004-20240419-en

trickbot banker trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  18b3ffabad9644d95e64cca21d2ba064_JaffaCakes118
- Size
  
  443KB
- MD5
  
  18b3ffabad9644d95e64cca21d2ba064
- SHA1
  
  c00961850fb546176dc69cecf3ab0cf5598225f6
- SHA256
  
  8458b8f86d423534a2c5e4e23aa033d8ae7824f9f0bf096e059b4d1236958851
- SHA512
  
  f5a2f9eafef3a1e23c433ef6ee1bd02a8d8440b5086b443cf52b9fc1d2b91b57f657080ed57a1f6ff4a27da75b88d4f7a32a5a2b35860b85df265e35b3cdb35c
- SSDEEP
  
  6144:Z6ohM6XPOgAtvl17gHp094WQaa4gL68sv/Abr:ZBhhPktvlFgH8OLA/
Score

10^/10

trickbot banker evasion execution trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Trickbot x86 loader
  Detected Trickbot's x86 loader that unpacks the x86 payload.
- Stops running service(s)
  evasion execution
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

trickbotbankerevasionexecutiontrojan

behavioral2

trickbotbankertrojan

© 2018-2025

Terms | Privacy