General

  • Target

    8cd7101dfe07e88cad2200702120d3a044cdce6fb8bce6a16207fd448d48d616

  • Size

    1.3MB

  • Sample

    240513-3nndaaba33

  • MD5

    78e60efdbc35d533cc4c36273873bf0e

  • SHA1

    08dee49b616ee9fdcd5ba99af5b49e65f8486326

  • SHA256

    8cd7101dfe07e88cad2200702120d3a044cdce6fb8bce6a16207fd448d48d616

  • SHA512

    b4bb36a10eec10cc1a38b4bc80bd88cd6ee13d7e8798a47dd867210e2540a8c8bd18e3c0a23e647ac178c6afeb4f678bde7d6f9849a53ee0814e939cf4e87763

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQt+4En+bcMAOFZ+jJ/1q0GrbcUxnMj0YOJ:E5aIwC+Agr6StVEnmcKWnq0vljLOJ

Malware Config

Targets

    • Target

      8cd7101dfe07e88cad2200702120d3a044cdce6fb8bce6a16207fd448d48d616

    • Size

      1.3MB

    • MD5

      78e60efdbc35d533cc4c36273873bf0e

    • SHA1

      08dee49b616ee9fdcd5ba99af5b49e65f8486326

    • SHA256

      8cd7101dfe07e88cad2200702120d3a044cdce6fb8bce6a16207fd448d48d616

    • SHA512

      b4bb36a10eec10cc1a38b4bc80bd88cd6ee13d7e8798a47dd867210e2540a8c8bd18e3c0a23e647ac178c6afeb4f678bde7d6f9849a53ee0814e939cf4e87763

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQt+4En+bcMAOFZ+jJ/1q0GrbcUxnMj0YOJ:E5aIwC+Agr6StVEnmcKWnq0vljLOJ

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks