trickbot

General

Target

df10f4e599ab171f2331cda414a56900N.exe
Size

476KB
Sample

240829-jm3xsszfre
MD5

df10f4e599ab171f2331cda414a56900
SHA1

fd3af01b6f8289154adc04b442bf87c987b6543a
SHA256

caa0a3c8c26aacff29273574c436948bd734aa1b85e16f12ea0575a07560e189
SHA512

bfc952780f9f98e04fe05fff434401ee101b8411ce4b1fa62876f38d6fa9149c473d69c9f8332d8050d07e5d09bb9abf452bb6b45145c7f8d76d240a11481ce0
SSDEEP

6144:cIzlI2lTAbw3TTIaThNALS0znn1hTF8PW8yLvBYQ8YiXCn6muSL7Cw5O547fEAC:vT8wIaThNv8nn3LvBYtYuuX/Ci78hH+

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

100018

Botnet

rob107

C2

38.110.103.124:443

185.56.76.28:443

204.138.26.60:443

60.51.47.65:443

74.85.157.139:443

68.69.26.182:443

38.110.103.136:443

38.110.103.18:443

138.34.28.219:443

185.56.76.94:443

217.115.240.248:443

24.162.214.166:443

80.15.2.105:443

154.58.23.192:443

38.110.100.104:443

45.36.99.184:443

185.56.76.108:443

185.56.76.72:443

138.34.28.35:443

97.83.40.67:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Targets

- Target
  
  df10f4e599ab171f2331cda414a56900N.exe
- Size
  
  476KB
- MD5
  
  df10f4e599ab171f2331cda414a56900
- SHA1
  
  fd3af01b6f8289154adc04b442bf87c987b6543a
- SHA256
  
  caa0a3c8c26aacff29273574c436948bd734aa1b85e16f12ea0575a07560e189
- SHA512
  
  bfc952780f9f98e04fe05fff434401ee101b8411ce4b1fa62876f38d6fa9149c473d69c9f8332d8050d07e5d09bb9abf452bb6b45145c7f8d76d240a11481ce0
- SSDEEP
  
  6144:cIzlI2lTAbw3TTIaThNALS0znn1hTF8PW8yLvBYQ8YiXCn6muSL7Cw5O547fEAC:vT8wIaThNv8nn3LvBYtYuuX/Ci78hH+
Score

10^/10

trickbot rob107 banker discovery trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2