Overview

overview

10

Static

static

3

7c2ef6dc22...18.exe

windows7-x64

10

7c2ef6dc22...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c2ef6dc22642540be369fde2755239b_JaffaCakes118

  • Size

    364KB

  • Sample

    240528-jctw5sba7z

  • MD5

    7c2ef6dc22642540be369fde2755239b

  • SHA1

    37299a7b248617223d1f630ca17db1f98d7c4dab

  • SHA256

    c651429c952daf39b73384ec2eaaf089089627664c0d680f24109c15e5e5f8fd

  • SHA512

    62e437c957ff657534c348b3b6ca8153e407da61f05bf3c21d3c102f5a6526a9a3fd147c59ac22901d82b32a3b3b5c034a75589bd25a6712ef9126d852a8b717

  • SSDEEP

    6144:X+8xvkz62lN1v3URxmwpcQKdu98jNI2uZ+3YtlIDM9/3TcBzI:X+ej2D1v3kxmwGJdw8pHuZEslIM9/jc

Score
10/10
trickbotbankertrojan

Malware Config

Targets

    • Target

      7c2ef6dc22642540be369fde2755239b_JaffaCakes118

    • Size

      364KB

    • MD5

      7c2ef6dc22642540be369fde2755239b

    • SHA1

      37299a7b248617223d1f630ca17db1f98d7c4dab

    • SHA256

      c651429c952daf39b73384ec2eaaf089089627664c0d680f24109c15e5e5f8fd

    • SHA512

      62e437c957ff657534c348b3b6ca8153e407da61f05bf3c21d3c102f5a6526a9a3fd147c59ac22901d82b32a3b3b5c034a75589bd25a6712ef9126d852a8b717

    • SSDEEP

      6144:X+8xvkz62lN1v3URxmwpcQKdu98jNI2uZ+3YtlIDM9/3TcBzI:X+ej2D1v3kxmwGJdw8pHuZEslIM9/jc

    Score
    10/10
    trickbotbankertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks