trickbot | 8d7b2988cdcf5ec9d5893d98e6f5385f499aefc9aa50ec26f11cd61322b37d0b | Triage

Submit
Reports

Overview

overview

Static

static

3

4df5ba2a6d...18.exe

windows7-x64

4df5ba2a6d...18.exe

windows10-2004-x64

Sharing

General

Target

4df5ba2a6ded0e1351ec8e61868fe80e_JaffaCakes118
Size

364KB
Sample

240517-ccw8yacb5w
MD5

4df5ba2a6ded0e1351ec8e61868fe80e
SHA1

78c4af1c41005eb63de3838f9c1c4ceeb9141485
SHA256

8d7b2988cdcf5ec9d5893d98e6f5385f499aefc9aa50ec26f11cd61322b37d0b
SHA512

83be7230c15295775d1bc64e8d630c50dca8c1d107640196944050f759741d76bc50e26168bb854523c62f6b36d14a7ada26b6808b47dfd7bbe8854943b7af49
SSDEEP

6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANH:WBOO3VKID90TBEhx4O6aH

Score

10^/10

trickbot banker dave trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

4df5ba2a6ded0e1351ec8e61868fe80e_JaffaCakes118.exe

Resource

win7-20240220-en

trickbot banker dave trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

4df5ba2a6ded0e1351ec8e61868fe80e_JaffaCakes118.exe

Resource

win10v2004-20240508-en

trickbot banker dave trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  4df5ba2a6ded0e1351ec8e61868fe80e_JaffaCakes118
- Size
  
  364KB
- MD5
  
  4df5ba2a6ded0e1351ec8e61868fe80e
- SHA1
  
  78c4af1c41005eb63de3838f9c1c4ceeb9141485
- SHA256
  
  8d7b2988cdcf5ec9d5893d98e6f5385f499aefc9aa50ec26f11cd61322b37d0b
- SHA512
  
  83be7230c15295775d1bc64e8d630c50dca8c1d107640196944050f759741d76bc50e26168bb854523c62f6b36d14a7ada26b6808b47dfd7bbe8854943b7af49
- SSDEEP
  
  6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANH:WBOO3VKID90TBEhx4O6aH
Score

10^/10

trickbot banker dave trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Dave packer
  Detects executable using a packer named 'Dave' by the community, based on a string at the end.
  dave
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trickbotbankerdavetrojan

behavioral2

trickbotbankerdavetrojan

© 2018-2024

Terms | Privacy