trickbot

General

Target

c22acdd5613a79a3d8a3571b3da5ecc6_JaffaCakes118
Size

589KB
Sample

240826-dn88ba1grb
MD5

c22acdd5613a79a3d8a3571b3da5ecc6
SHA1

c205752149b3bb85fda800ab1c48a44edf0cbf38
SHA256

003af0a8411a8f280a4af0c3ab807b0572a7dbbc782c4f007fcb7889bd683e9e
SHA512

6139ee7d60895d0a4d8535aced795780a48ea6c9b388999ea8c1655e3e96e399fb37d3050e5725d53f9bf9c3adc0ebf81eb31849fd84645b6aa69b59e6bd7682
SSDEEP

12288:8a35NNMyw08jsI525olVNyM+ptFzo4KsuvBGPvRRDehtQ9tIybxv3:8g5NNhw0UT525oLN6pt1jDRRwtCnxv3

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

100011

Botnet

mon67

C2

194.5.249.156:443

142.202.191.164:443

193.8.194.96:443

45.155.173.242:443

108.170.20.75:443

185.163.45.138:443

94.140.114.136:443

134.119.186.202:443

200.52.147.93:443

45.230.244.20:443

186.250.157.116:443

186.137.85.76:443

36.94.62.207:443

182.253.107.34:443

Attributes

autorun
Name:pwgrab

ecc_pubkey.base64

Targets

- Target
  
  c22acdd5613a79a3d8a3571b3da5ecc6_JaffaCakes118
- Size
  
  589KB
- MD5
  
  c22acdd5613a79a3d8a3571b3da5ecc6
- SHA1
  
  c205752149b3bb85fda800ab1c48a44edf0cbf38
- SHA256
  
  003af0a8411a8f280a4af0c3ab807b0572a7dbbc782c4f007fcb7889bd683e9e
- SHA512
  
  6139ee7d60895d0a4d8535aced795780a48ea6c9b388999ea8c1655e3e96e399fb37d3050e5725d53f9bf9c3adc0ebf81eb31849fd84645b6aa69b59e6bd7682
- SSDEEP
  
  12288:8a35NNMyw08jsI525olVNyM+ptFzo4KsuvBGPvRRDehtQ9tIybxv3:8g5NNhw0UT525oLN6pt1jDRRwtCnxv3
Score

10^/10

trickbot mon67 banker discovery packer trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Templ.dll packer
  Detects Templ.dll packer which usually loads Trickbot.
  packer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Templ.dll packer

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2