General
-
Target
a42b2b4efd836bab09bfd291abd1dbad_JaffaCakes118
-
Size
844KB
-
Sample
240817-z5mxasxdmf
-
MD5
a42b2b4efd836bab09bfd291abd1dbad
-
SHA1
0e168f22d07e656c7c9192ff62f1348d6e75ee0f
-
SHA256
f0391039f888fb30566295365420868ac8539075e25a690ac4400a8bb91eb803
-
SHA512
db8e40c7cd84d5f9d05ee31a08f2fed784c430e13d8ec75c26b096b73a63a5c40d977cbf3352541b67af5a9c0fd1a287ae15a8de939d5416f71fbc1f9eb47137
-
SSDEEP
6144:mW4GCPhnfAhpKMRB6zST4ynXHuVsSOBsGh/HDW:mW4VPhIK5mDwp6HDW
Malware Config
Extracted
trickbot
2000025
lib43
134.119.186.200:443
45.14.226.115:443
85.204.116.134:443
45.89.127.240:443
195.123.241.195:443
188.34.142.248:443
185.234.72.84:443
108.170.20.72:443
94.158.245.54:443
134.119.186.201:443
45.83.129.224:443
85.93.159.98:449
92.242.214.203:449
202.21.103.194:449
169.239.45.42:449
45.234.248.66:449
103.91.244.102:449
118.67.216.238:449
117.212.193.62:449
201.184.190.59:449
-
autorunName:pwgrab
Targets
-
-
Target
a42b2b4efd836bab09bfd291abd1dbad_JaffaCakes118
-
Size
844KB
-
MD5
a42b2b4efd836bab09bfd291abd1dbad
-
SHA1
0e168f22d07e656c7c9192ff62f1348d6e75ee0f
-
SHA256
f0391039f888fb30566295365420868ac8539075e25a690ac4400a8bb91eb803
-
SHA512
db8e40c7cd84d5f9d05ee31a08f2fed784c430e13d8ec75c26b096b73a63a5c40d977cbf3352541b67af5a9c0fd1a287ae15a8de939d5416f71fbc1f9eb47137
-
SSDEEP
6144:mW4GCPhnfAhpKMRB6zST4ynXHuVsSOBsGh/HDW:mW4VPhIK5mDwp6HDW
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-