General

  • Target

    11a57e0c65f6d5842860d9a6b9966a60_NEIKI

  • Size

    603KB

  • Sample

    240508-xmlkeacf68

  • MD5

    11a57e0c65f6d5842860d9a6b9966a60

  • SHA1

    ced5c39f07a11bf20648b31d9a4b59bf71e25c79

  • SHA256

    24094cbb28abc82c32dba4d698191494add3833323dd5712caf66af6b8d7848e

  • SHA512

    a7a89b1b214a9c99b893a7ac28c8bc8e26b091f90d89fdc3095207c329090a194ad27f062bdee4bcab76bb06a6670311d70be523b56eb8e43b4a225aa79a9cc4

  • SSDEEP

    6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuXCyW8bQQG7NpAvFV3I:zJB0lh5aILwtFPCfmAUtxjEG7NpAvFK

Malware Config

Targets

    • Target

      11a57e0c65f6d5842860d9a6b9966a60_NEIKI

    • Size

      603KB

    • MD5

      11a57e0c65f6d5842860d9a6b9966a60

    • SHA1

      ced5c39f07a11bf20648b31d9a4b59bf71e25c79

    • SHA256

      24094cbb28abc82c32dba4d698191494add3833323dd5712caf66af6b8d7848e

    • SHA512

      a7a89b1b214a9c99b893a7ac28c8bc8e26b091f90d89fdc3095207c329090a194ad27f062bdee4bcab76bb06a6670311d70be523b56eb8e43b4a225aa79a9cc4

    • SSDEEP

      6144:zJB0PLonpe1h5fqpErm9cRLBOtFWaCfmAU+wDhuXCyW8bQQG7NpAvFV3I:zJB0lh5aILwtFPCfmAUtxjEG7NpAvFK

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks