trickbot | 4932d9e0028486545a59ee788f0be27ef59ac4b81f84c3dcf38fc6ed8b3f8002 | Triage

Submit
Reports

Overview

overview

Static

static

3

ae0802fcd8...18.exe

windows7-x64

ae0802fcd8...18.exe

windows10-2004-x64

Sharing

General

Target

ae0802fcd8705ab1120dceb66a0eefee_JaffaCakes118
Size

448KB
Sample

240615-mqeads1dnq
MD5

ae0802fcd8705ab1120dceb66a0eefee
SHA1

53e4e3fff15ea2f7947892e33ddf7d6d2aa96ef6
SHA256

4932d9e0028486545a59ee788f0be27ef59ac4b81f84c3dcf38fc6ed8b3f8002
SHA512

fdcee0b4908a18e4b14135d71ce9b72a65e21d3d03551738ebd215cf121649547b5d25615ad820c492940927997d0dbe39295c724ad39382badfa30c7f33d08a
SSDEEP

12288:QboBb/W9ANGBAFb5i0P6HfewKQLYg0yCxQ:4xBAiAHwfzx

Score

10^/10

trickbot banker dave trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ae0802fcd8705ab1120dceb66a0eefee_JaffaCakes118.exe

Resource

win7-20240508-en

trickbot banker dave trojan

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

ae0802fcd8705ab1120dceb66a0eefee_JaffaCakes118.exe

Resource

win10v2004-20240508-en

trickbot banker dave trojan

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  ae0802fcd8705ab1120dceb66a0eefee_JaffaCakes118
- Size
  
  448KB
- MD5
  
  ae0802fcd8705ab1120dceb66a0eefee
- SHA1
  
  53e4e3fff15ea2f7947892e33ddf7d6d2aa96ef6
- SHA256
  
  4932d9e0028486545a59ee788f0be27ef59ac4b81f84c3dcf38fc6ed8b3f8002
- SHA512
  
  fdcee0b4908a18e4b14135d71ce9b72a65e21d3d03551738ebd215cf121649547b5d25615ad820c492940927997d0dbe39295c724ad39382badfa30c7f33d08a
- SSDEEP
  
  12288:QboBb/W9ANGBAFb5i0P6HfewKQLYg0yCxQ:4xBAiAHwfzx
Score

10^/10

trickbot banker dave trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Dave packer
  Detects executable using a packer named 'Dave' by the community, based on a string at the end.
  dave
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

trickbotbankerdavetrojan

behavioral2

trickbotbankerdavetrojan

© 2018-2024

Terms | Privacy