Overview

overview

10

Static

static

10

608dca84d4...25.exe

windows7-x64

10

608dca84d4...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    608dca84d4a61fe8856a74ed2f7d6825eb99f937deb6513f290c437bb1c75125

  • Size

    905KB

  • Sample

    240509-12cgtsce42

  • MD5

    6ad83ff41802a736334a318c7acb1df5

  • SHA1

    93e069458f5a12b7706104de098a459e384cfbda

  • SHA256

    608dca84d4a61fe8856a74ed2f7d6825eb99f937deb6513f290c437bb1c75125

  • SHA512

    8a1d20cbc3ab006cccbefb4412122c4a2d4f63ad69633f608ce07acee8fcc86e4e5955cdb0d76a6637f3e571be902feabec9f217e46ca2c3e41342d533349014

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQt+4EnpZgkJOSSkX:E5aIwC+Agr6StVEn0kso

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      608dca84d4a61fe8856a74ed2f7d6825eb99f937deb6513f290c437bb1c75125

    • Size

      905KB

    • MD5

      6ad83ff41802a736334a318c7acb1df5

    • SHA1

      93e069458f5a12b7706104de098a459e384cfbda

    • SHA256

      608dca84d4a61fe8856a74ed2f7d6825eb99f937deb6513f290c437bb1c75125

    • SHA512

      8a1d20cbc3ab006cccbefb4412122c4a2d4f63ad69633f608ce07acee8fcc86e4e5955cdb0d76a6637f3e571be902feabec9f217e46ca2c3e41342d533349014

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQt+4EnpZgkJOSSkX:E5aIwC+Agr6StVEn0kso

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks