trickbot | 3b53b2a1d801feaabef685df8bd8339f20d0acff15ebf894170f3a39793f4f6c | Triage

Submit
Reports

Overview

overview

Static

static

3

b0ad585c6b...18.exe

windows7-x64

b0ad585c6b...18.exe

windows10-2004-x64

Sharing

General

Target

b0ad585c6b7ce62f46436f1944598afe_JaffaCakes118
Size

364KB
Sample

240615-3hn3mayhrd
MD5

b0ad585c6b7ce62f46436f1944598afe
SHA1

2b87fad77adedea0c527ab428d2ea7206ee7e6c3
SHA256

3b53b2a1d801feaabef685df8bd8339f20d0acff15ebf894170f3a39793f4f6c
SHA512

0dd1de2fe4bcbdd023d3b7b2e4490100b489738763ba6911c359fecc17e748735f1b9043112701ec3db16fefcf4998e750982b578bca8f92e5f487305c95b0a9
SSDEEP

6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANW:WBOO3VKID90TBEhx4O6aW

Score

10^/10

trickbot banker dave trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b0ad585c6b7ce62f46436f1944598afe_JaffaCakes118.exe

Resource

win7-20240611-en

trickbot banker dave trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

b0ad585c6b7ce62f46436f1944598afe_JaffaCakes118.exe

Resource

win10v2004-20240508-en

trickbot banker dave trojan

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  b0ad585c6b7ce62f46436f1944598afe_JaffaCakes118
- Size
  
  364KB
- MD5
  
  b0ad585c6b7ce62f46436f1944598afe
- SHA1
  
  2b87fad77adedea0c527ab428d2ea7206ee7e6c3
- SHA256
  
  3b53b2a1d801feaabef685df8bd8339f20d0acff15ebf894170f3a39793f4f6c
- SHA512
  
  0dd1de2fe4bcbdd023d3b7b2e4490100b489738763ba6911c359fecc17e748735f1b9043112701ec3db16fefcf4998e750982b578bca8f92e5f487305c95b0a9
- SSDEEP
  
  6144:WBOO856a60r+UogID97/IXjBE7SL+MEXxtSbsP6ANW:WBOO3VKID90TBEhx4O6aW
Score

10^/10

trickbot banker dave trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Dave packer
  Detects executable using a packer named 'Dave' by the community, based on a string at the end.
  dave
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trickbotbankerdavetrojan

behavioral2

trickbotbankerdavetrojan

© 2018-2024

Terms | Privacy