Overview

overview

10

Static

static

3

2024-08-24...id.exe

windows7-x64

10

2024-08-24...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-24_6d55c28364e2139f648e36be6a890cfc_icedid

  • Size

    514KB

  • Sample

    240824-t7jprszama

  • MD5

    6d55c28364e2139f648e36be6a890cfc

  • SHA1

    fce590239116f1ee9e83ad71a347f1f96c9c4aa6

  • SHA256

    71296cf7fa0c4ab72891226f3510fc2c36a96248a85580f5c65d881c8b12a675

  • SHA512

    b9a53f84e009db7ba6d63a8f674992f7aeaecf90d672dbf5c72eafa9429cbca84c37684cdd86599ddc3107b455d336e1dc638bf35eab1d5dc3e9d04451a78bfd

  • SSDEEP

    12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYfZr1zW:ZXQUIsQpMsequrmGRr1zW

Score
10/10
trickbotbankerdiscoverytrojan

Malware Config

Targets

    • Target

      2024-08-24_6d55c28364e2139f648e36be6a890cfc_icedid

    • Size

      514KB

    • MD5

      6d55c28364e2139f648e36be6a890cfc

    • SHA1

      fce590239116f1ee9e83ad71a347f1f96c9c4aa6

    • SHA256

      71296cf7fa0c4ab72891226f3510fc2c36a96248a85580f5c65d881c8b12a675

    • SHA512

      b9a53f84e009db7ba6d63a8f674992f7aeaecf90d672dbf5c72eafa9429cbca84c37684cdd86599ddc3107b455d336e1dc638bf35eab1d5dc3e9d04451a78bfd

    • SSDEEP

      12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYfZr1zW:ZXQUIsQpMsequrmGRr1zW

    Score
    10/10
    trickbotbankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks