Overview

overview

10

Static

static

10

c594f8d075...cs.exe

windows7-x64

10

c594f8d075...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c594f8d0750dc5ee9ac98b0f32fa4c40_NeikiAnalytics

  • Size

    956KB

  • Sample

    240514-n6mr5seg86

  • MD5

    c594f8d0750dc5ee9ac98b0f32fa4c40

  • SHA1

    c1f1c919bdb3182b469098c2489dec9bee6df494

  • SHA256

    2e84c1b17cd02290036f9a53f626611ff3a435a512a622d53b807ebd264fd770

  • SHA512

    d35e5f42f56bb8133b2fb528e353f5fea8ec8b6f6dd707c476a64f620b1eb5d59ef6f3ed2fac120ab2b7f33675c8b5b2c137ffae78033005853e94992665d3d5

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQ0+wCIygDsAUkhmZc:E5aIwC+Agr6SNbq

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      c594f8d0750dc5ee9ac98b0f32fa4c40_NeikiAnalytics

    • Size

      956KB

    • MD5

      c594f8d0750dc5ee9ac98b0f32fa4c40

    • SHA1

      c1f1c919bdb3182b469098c2489dec9bee6df494

    • SHA256

      2e84c1b17cd02290036f9a53f626611ff3a435a512a622d53b807ebd264fd770

    • SHA512

      d35e5f42f56bb8133b2fb528e353f5fea8ec8b6f6dd707c476a64f620b1eb5d59ef6f3ed2fac120ab2b7f33675c8b5b2c137ffae78033005853e94992665d3d5

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQ0+wCIygDsAUkhmZc:E5aIwC+Agr6SNbq

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks