trickbot | 6d0376ea05a78b524588479f1994fe979d0a42e4103b994dbc9d77e30bc0af20 | Triage

Submit
Reports

Overview

overview

Static

static

3

8789de3da5...18.exe

windows7-x64

8789de3da5...18.exe

windows10-2004-x64

Sharing

General

Target

8789de3da5ceaff9235c0a64ed58801c_JaffaCakes118
Size

364KB
Sample

240531-s91kmadb2s
MD5

8789de3da5ceaff9235c0a64ed58801c
SHA1

87acee904368d72541733aaa6a82d59edd857d6d
SHA256

6d0376ea05a78b524588479f1994fe979d0a42e4103b994dbc9d77e30bc0af20
SHA512

9e20b0a3c42277a77f7ea183fd4548189bb99a87fad79bb220baf64b70f04c65e90d28c1e4ec36630e39762614f02545cf8803d1411bc97d981a2a751bc0e34d
SSDEEP

6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANw:WBOO3VKID90TBEhx4O6aw

Score

10^/10

trickbot banker dave trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8789de3da5ceaff9235c0a64ed58801c_JaffaCakes118.exe

Resource

win7-20240221-en

trickbot banker dave trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

8789de3da5ceaff9235c0a64ed58801c_JaffaCakes118.exe

Resource

win10v2004-20240426-en

trickbot banker dave trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  8789de3da5ceaff9235c0a64ed58801c_JaffaCakes118
- Size
  
  364KB
- MD5
  
  8789de3da5ceaff9235c0a64ed58801c
- SHA1
  
  87acee904368d72541733aaa6a82d59edd857d6d
- SHA256
  
  6d0376ea05a78b524588479f1994fe979d0a42e4103b994dbc9d77e30bc0af20
- SHA512
  
  9e20b0a3c42277a77f7ea183fd4548189bb99a87fad79bb220baf64b70f04c65e90d28c1e4ec36630e39762614f02545cf8803d1411bc97d981a2a751bc0e34d
- SSDEEP
  
  6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANw:WBOO3VKID90TBEhx4O6aw
Score

10^/10

trickbot banker dave trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Dave packer
  Detects executable using a packer named 'Dave' by the community, based on a string at the end.
  dave
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trickbotbankerdavetrojan

behavioral2

trickbotbankerdavetrojan

© 2018-2024

Terms | Privacy