trickbot

Resubmissions

27-06-2024 09:23

240627-lcm5pstfna 3

27-06-2024 09:22

240627-lb9bjswgjr 3

27-06-2024 08:25

240627-kbh9pa1dmc 10

Sharing

Copy URL

Twitter E-mail

General

Target

1550b80100800a7f91e2f410907c70a0_JaffaCakes118
Size

432KB
Sample

240627-kbh9pa1dmc
MD5

1550b80100800a7f91e2f410907c70a0
SHA1

4ded248dfa7d135314708e6f112d494477b73209
SHA256

0bddd7467c75f4c17a1bfa4ffb352835d495c6699cec443aeef4fef61dea88a2
SHA512

9d34db18004c69ce2271b321d9d3cd1d1d3a0b93e24cd684600ea14a543ff5a6771f6aad1e6cc2d65c4748f4e30f1cf97b81a8edfc1874c771de1efc132fb6a9
SSDEEP

6144:wkdJN4c+ePGcPr1tJ3VQl/XE3dAPr3x7835OPeFPQimA6Vk58qVEb9pE:wkdJLbPhtlCl/XIIx/lbVMlG

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

top128

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Targets

- Target
  
  1550b80100800a7f91e2f410907c70a0_JaffaCakes118
- Size
  
  432KB
- MD5
  
  1550b80100800a7f91e2f410907c70a0
- SHA1
  
  4ded248dfa7d135314708e6f112d494477b73209
- SHA256
  
  0bddd7467c75f4c17a1bfa4ffb352835d495c6699cec443aeef4fef61dea88a2
- SHA512
  
  9d34db18004c69ce2271b321d9d3cd1d1d3a0b93e24cd684600ea14a543ff5a6771f6aad1e6cc2d65c4748f4e30f1cf97b81a8edfc1874c771de1efc132fb6a9
- SSDEEP
  
  6144:wkdJN4c+ePGcPr1tJ3VQl/XE3dAPr3x7835OPeFPQimA6Vk58qVEb9pE:wkdJLbPhtlCl/XIIx/lbVMlG
Score

10^/10

trickbot top128 banker trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks