Overview

overview

10

Static

static

10

82b1fccb21...AS.exe

windows7-x64

10

82b1fccb21...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82b1fccb2191c5faae77e6403f21a5b0_NEAS

  • Size

    1.1MB

  • Sample

    240507-harhkaga68

  • MD5

    82b1fccb2191c5faae77e6403f21a5b0

  • SHA1

    a1d51363ab9462bce510f9b38d9fc32926ebea43

  • SHA256

    8a08748f0731289cfc9e3adca8f90829f17f774ef505fbd82ffa55a3dc6d6436

  • SHA512

    3f40b4b1b0123e98c47c4e1315048de0350293eae2be67eb303b995b29f6f396f66062cb070a606ce81b04d6f4c1243066b8f1036e6acf1a85f6b97fddbb94cd

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQt+4En+bcMAOxA5zYlo1c51Wn7K:E5aIwC+Agr6StVEnmcKxY/O16K

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      82b1fccb2191c5faae77e6403f21a5b0_NEAS

    • Size

      1.1MB

    • MD5

      82b1fccb2191c5faae77e6403f21a5b0

    • SHA1

      a1d51363ab9462bce510f9b38d9fc32926ebea43

    • SHA256

      8a08748f0731289cfc9e3adca8f90829f17f774ef505fbd82ffa55a3dc6d6436

    • SHA512

      3f40b4b1b0123e98c47c4e1315048de0350293eae2be67eb303b995b29f6f396f66062cb070a606ce81b04d6f4c1243066b8f1036e6acf1a85f6b97fddbb94cd

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQt+4En+bcMAOxA5zYlo1c51Wn7K:E5aIwC+Agr6StVEnmcKxY/O16K

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks