Overview

overview

10

Static

static

10

6cef046507...eb.exe

windows7-x64

10

6cef046507...eb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6cef04650713f395404daeed121d19ad249838c7cb0ba659cb6a241bff3b3feb

  • Size

    1.0MB

  • Sample

    240610-qkc2xsxelq

  • MD5

    bbc63c0e9914c9bcacbb84324623de01

  • SHA1

    09b43a084c8089d61d38f85afe905625730a808c

  • SHA256

    6cef04650713f395404daeed121d19ad249838c7cb0ba659cb6a241bff3b3feb

  • SHA512

    221bcd4aa22a1533b3c065b668b5b7d54ff054110c758186323fd2ad443614a53dc1e39b0dae021edca131f43b3c6ff2d0e11a21cd11727efe295f4c6f888eb3

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+U:E5aIwC+Agr6SNasrU

Score
10/10
kpottrickbotbankerevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      6cef04650713f395404daeed121d19ad249838c7cb0ba659cb6a241bff3b3feb

    • Size

      1.0MB

    • MD5

      bbc63c0e9914c9bcacbb84324623de01

    • SHA1

      09b43a084c8089d61d38f85afe905625730a808c

    • SHA256

      6cef04650713f395404daeed121d19ad249838c7cb0ba659cb6a241bff3b3feb

    • SHA512

      221bcd4aa22a1533b3c065b668b5b7d54ff054110c758186323fd2ad443614a53dc1e39b0dae021edca131f43b3c6ff2d0e11a21cd11727efe295f4c6f888eb3

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQ0+wCIygDsAUSTsU9+U:E5aIwC+Agr6SNasrU

    Score
    10/10
    kpottrickbotbankerevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks