trickbot

General

Target

6c0a8a2b30b2e35564f83da09a143cf2_JaffaCakes118
Size

504KB
Sample

240523-ybr4gsdf78
MD5

6c0a8a2b30b2e35564f83da09a143cf2
SHA1

4ce0c5b010bd56c5dcd2bfc76f98ab64bfb70e54
SHA256

d0b9cef00b943a7861cf5bceaadff3ddadb7247e540361543b0279fe3c716e86
SHA512

535f6a39275e5114a2c2b9c97e9614da5a8876f605b461fd5ea7454497bb12b9492f8137dbda431202094d0a3fe56330bf407edfc284cba14d2a16dd2f3e4e78
SSDEEP

6144:lif3ei2lpZqRzZclaOyugXi2w5O2dw0ddLWCYPvw5izPUaBHjw8QUllWy6berHDT:M/L3rcqEBRaCY3iQPUaNU8DnX6a

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

2000010

Botnet

mor126

C2

195.123.239.59:443

85.143.219.36:443

94.250.254.84:443

94.250.255.217:443

212.80.219.98:443

91.210.171.82:443

45.8.230.108:443

194.156.98.172:443

195.2.93.227:443

62.108.35.179:443

91.200.101.192:443

194.5.249.31:443

195.123.241.157:443

104.161.32.10:443

88.150.197.186:443

62.108.35.204:443

45.155.173.196:443

51.89.177.18:443

194.5.249.107:443

195.123.241.182:443

Attributes

autorun
Name:pwgrab

ecc_pubkey.base64

Targets

- Target
  
  6c0a8a2b30b2e35564f83da09a143cf2_JaffaCakes118
- Size
  
  504KB
- MD5
  
  6c0a8a2b30b2e35564f83da09a143cf2
- SHA1
  
  4ce0c5b010bd56c5dcd2bfc76f98ab64bfb70e54
- SHA256
  
  d0b9cef00b943a7861cf5bceaadff3ddadb7247e540361543b0279fe3c716e86
- SHA512
  
  535f6a39275e5114a2c2b9c97e9614da5a8876f605b461fd5ea7454497bb12b9492f8137dbda431202094d0a3fe56330bf407edfc284cba14d2a16dd2f3e4e78
- SSDEEP
  
  6144:lif3ei2lpZqRzZclaOyugXi2w5O2dw0ddLWCYPvw5izPUaBHjw8QUllWy6berHDT:M/L3rcqEBRaCY3iQPUaNU8DnX6a
Score

10^/10

trickbot mor126 banker trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2