Overview

overview

10

Static

static

3

ab0942e4e1...18.exe

windows7-x64

10

ab0942e4e1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab0942e4e1a30a52eb28a2338cfc9eb7_JaffaCakes118

  • Size

    676KB

  • Sample

    240819-pq5tfstgme

  • MD5

    ab0942e4e1a30a52eb28a2338cfc9eb7

  • SHA1

    05b153cea47c2f9ee31d645d967ad54eb50ef9a9

  • SHA256

    b465cb3eec5644b9e0898bff7cf05a28f131394acfd5674d55c78813ca9b111c

  • SHA512

    fc6579402efbc49ca3d33b3a1de20d72387a4236ef494f447095410f47225d5be9d3463b23de411c4f357e84e1d205cdd0c0a2328f693353e16385b0e9aa81ce

  • SSDEEP

    12288:FacEfn98kB7xGEHuNACiMFL6hwsrwacEAf9n4vUDRtILD+lD7:Ic8n3fhhwGctnRYalP

Score
10/10
trickbotmor124bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

1000514

Botnet

mor124

C2

51.89.163.40:443

89.223.126.186:443

45.67.231.68:443

148.251.185.165:443

194.87.110.144:443

213.32.84.27:443

185.234.72.35:443

45.89.125.148:443

195.123.240.104:443

185.99.2.243:443

5.182.211.223:443

195.123.240.113:443

85.204.116.173:443

5.152.210.188:443

103.36.48.103:449

36.94.33.102:449

36.91.87.227:449

177.190.69.162:449

103.76.169.213:449

179.97.246.23:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      ab0942e4e1a30a52eb28a2338cfc9eb7_JaffaCakes118

    • Size

      676KB

    • MD5

      ab0942e4e1a30a52eb28a2338cfc9eb7

    • SHA1

      05b153cea47c2f9ee31d645d967ad54eb50ef9a9

    • SHA256

      b465cb3eec5644b9e0898bff7cf05a28f131394acfd5674d55c78813ca9b111c

    • SHA512

      fc6579402efbc49ca3d33b3a1de20d72387a4236ef494f447095410f47225d5be9d3463b23de411c4f357e84e1d205cdd0c0a2328f693353e16385b0e9aa81ce

    • SSDEEP

      12288:FacEfn98kB7xGEHuNACiMFL6hwsrwacEAf9n4vUDRtILD+lD7:Ic8n3fhhwGctnRYalP

    Score
    10/10
    trickbotmor124bankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks