Overview

overview

10

Static

static

10

14f75789c2...cs.exe

windows7-x64

10

14f75789c2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14f75789c2bcff0d8e8152d22e80ded0_NeikiAnalytics

  • Size

    904KB

  • Sample

    240511-sz77qadf8y

  • MD5

    14f75789c2bcff0d8e8152d22e80ded0

  • SHA1

    ffac48b665739eb7322bc8ee8a8d74fd7f4d1e28

  • SHA256

    8cd7a0b9288d7871050a26d856e8cf36bffab3c5cf2ef8c38d5c9220d80334e2

  • SHA512

    910c1c9e8b79c57a2ca1b3d22dedcdf2690bb7fcb6514a05bac5f3b898c21dfca481a88598e635a287662e011efb1bd84aeabba3e2828f9077f132ca779af185

  • SSDEEP

    12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQqtGSsGa60C+4PMAQBnmas:zQ5aILMCfmAUjzX6xQtjmssv

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      14f75789c2bcff0d8e8152d22e80ded0_NeikiAnalytics

    • Size

      904KB

    • MD5

      14f75789c2bcff0d8e8152d22e80ded0

    • SHA1

      ffac48b665739eb7322bc8ee8a8d74fd7f4d1e28

    • SHA256

      8cd7a0b9288d7871050a26d856e8cf36bffab3c5cf2ef8c38d5c9220d80334e2

    • SHA512

      910c1c9e8b79c57a2ca1b3d22dedcdf2690bb7fcb6514a05bac5f3b898c21dfca481a88598e635a287662e011efb1bd84aeabba3e2828f9077f132ca779af185

    • SSDEEP

      12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQqtGSsGa60C+4PMAQBnmas:zQ5aILMCfmAUjzX6xQtjmssv

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks