Overview

overview

10

Static

static

3

217bc5d67a...cs.exe

windows7-x64

10

217bc5d67a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    217bc5d67ab6285e6d5542e57204bcd0_NeikiAnalytics.exe

  • Size

    1.0MB

  • Sample

    240516-yjdk3add4y

  • MD5

    217bc5d67ab6285e6d5542e57204bcd0

  • SHA1

    508784a64ee264f659c668f95dc2c05308b9edc8

  • SHA256

    5ca0483b200f8aa714bef92091563961d7c7a2043a8583e0efe4a1451784f500

  • SHA512

    4259fab5d561735f139b1cdf27ad263e1db2819cfdb8ea1c21c20c4a8f3d6667eeb546d963c8165d175c43d2df91dcdab7ceea0ed3feed705e152730c55e5165

  • SSDEEP

    24576:zQ5aILMCfmAUhrSO1YNWdvCzMPqdUD6dNXfpF:E5aIwC+AUBsWsXp

Score
10/10
trickbotbankerevasionexecutiontrojan

Malware Config

Targets

    • Target

      217bc5d67ab6285e6d5542e57204bcd0_NeikiAnalytics.exe

    • Size

      1.0MB

    • MD5

      217bc5d67ab6285e6d5542e57204bcd0

    • SHA1

      508784a64ee264f659c668f95dc2c05308b9edc8

    • SHA256

      5ca0483b200f8aa714bef92091563961d7c7a2043a8583e0efe4a1451784f500

    • SHA512

      4259fab5d561735f139b1cdf27ad263e1db2819cfdb8ea1c21c20c4a8f3d6667eeb546d963c8165d175c43d2df91dcdab7ceea0ed3feed705e152730c55e5165

    • SSDEEP

      24576:zQ5aILMCfmAUhrSO1YNWdvCzMPqdUD6dNXfpF:E5aIwC+AUBsWsXp

    Score
    10/10
    trickbotbankerevasionexecutiontrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks