Overview

overview

10

Static

static

10

55ef12a981...0N.exe

windows7-x64

10

55ef12a981...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    55ef12a981ff94f6c143d108d9dccec0N.exe

  • Size

    914KB

  • Sample

    240807-dsfrkashkg

  • MD5

    55ef12a981ff94f6c143d108d9dccec0

  • SHA1

    25189bbd538829a1ffba64a0e436bc02192c7603

  • SHA256

    1d9ef62d36155fca044aa6984284ef38bcd734c0bc2efb6996c7ef55691a53a9

  • SHA512

    4aa34b0a566bd55184a5a29c3e81f536e919c609cf1f4bc3639f9d7efd0d8bf13e812f6a21ac315ddf9e8538996d5ea1da85b47f722e83bde3cd5c9d96308abc

  • SSDEEP

    12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQGCsksQjn6YHldGm1ufSD8Gl+xbbsm:zQ5aILMCfmAUjzX6xQGCZLFdGm13J+ym

Score
10/10
kpottrickbotbankerdiscoveryevasionexecutionstealertrojan

Malware Config

Targets

    • Target

      55ef12a981ff94f6c143d108d9dccec0N.exe

    • Size

      914KB

    • MD5

      55ef12a981ff94f6c143d108d9dccec0

    • SHA1

      25189bbd538829a1ffba64a0e436bc02192c7603

    • SHA256

      1d9ef62d36155fca044aa6984284ef38bcd734c0bc2efb6996c7ef55691a53a9

    • SHA512

      4aa34b0a566bd55184a5a29c3e81f536e919c609cf1f4bc3639f9d7efd0d8bf13e812f6a21ac315ddf9e8538996d5ea1da85b47f722e83bde3cd5c9d96308abc

    • SSDEEP

      12288:zJB0lh5aILwtFPCfmAUtFC6NXbv+GEBQGCsksQjn6YHldGm1ufSD8Gl+xbbsm:zQ5aILMCfmAUjzX6xQGCZLFdGm13J+ym

    Score
    10/10
    kpottrickbotbankerdiscoveryevasionexecutionstealertrojan

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Stops running service(s)

      evasionexecution

    • Executes dropped EXE

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks