General
-
Target
a0ec1785193850bd26c9b81754fca844_JaffaCakes118
-
Size
832KB
-
Sample
240817-c92jxswerq
-
MD5
a0ec1785193850bd26c9b81754fca844
-
SHA1
fdcdcc45192c1e5477d6d1a3694411e3b5d1682d
-
SHA256
037ee091feab21eece3f2a07ab70ebbd63c622552aeed929d3f49127e21e5c2b
-
SHA512
4e068be7399d0c480da32c1770aedc460874788b095cd24e8ff77e3910b49b1236ec6348c730ca0a7f75fe3c76c04d1e5fd9e29cf429e861446f25d98eb2f895
-
SSDEEP
6144:0fPzkZx9XfzZbtr08QgkF72BPNC33Fk0oYQzYUqhLKByhgvb4Hf2L:OPzkZfxtQ8Ql75HJp+Yh+v4/8
Malware Config
Extracted
trickbot
2000025
tot44
134.119.186.200:443
45.14.226.115:443
85.204.116.134:443
45.89.127.240:443
195.123.241.195:443
188.34.142.248:443
185.234.72.84:443
108.170.20.72:443
94.158.245.54:443
134.119.186.201:443
45.83.129.224:443
85.93.159.98:449
92.242.214.203:449
202.21.103.194:449
169.239.45.42:449
45.234.248.66:449
103.91.244.102:449
118.67.216.238:449
117.212.193.62:449
201.184.190.59:449
-
autorunName:pwgrab
Targets
-
-
Target
a0ec1785193850bd26c9b81754fca844_JaffaCakes118
-
Size
832KB
-
MD5
a0ec1785193850bd26c9b81754fca844
-
SHA1
fdcdcc45192c1e5477d6d1a3694411e3b5d1682d
-
SHA256
037ee091feab21eece3f2a07ab70ebbd63c622552aeed929d3f49127e21e5c2b
-
SHA512
4e068be7399d0c480da32c1770aedc460874788b095cd24e8ff77e3910b49b1236ec6348c730ca0a7f75fe3c76c04d1e5fd9e29cf429e861446f25d98eb2f895
-
SSDEEP
6144:0fPzkZx9XfzZbtr08QgkF72BPNC33Fk0oYQzYUqhLKByhgvb4Hf2L:OPzkZfxtQ8Ql75HJp+Yh+v4/8
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-