General
-
Target
5e2209be4d3b9347f9c262ead6ebdd57.zip
-
Size
454KB
-
Sample
240831-bwzmqsybnj
-
MD5
64a869c0c3fb5a42d0c37343eb73d92f
-
SHA1
1dfaa8e41f3388db23255c3c605ac02b4522eb12
-
SHA256
193ba6976c4f9a6cae643b2fa17f42e0d22746f8bc6408ee1dc6286d255729fd
-
SHA512
fde367e4b3e263cb8645eff340648206b0928767e9232bd7aa1f5c72138664b8c27403159e1cc24cb699e6ef8c54fa680537a2ef3d743c5704cebddc46bdc97c
-
SSDEEP
12288:iKLOooMvCs5oHxBAsRgI5a+/zCNna/QSt7j4to1NcXEE:vqKZoRBABI55QAwMNkx
Malware Config
Extracted
trickbot
2000035
tot166
36.91.117.231:443
36.89.228.201:443
103.75.32.173:443
45.115.172.105:443
36.95.23.89:443
103.123.86.104:443
202.65.119.162:443
202.9.121.143:443
139.255.65.170:443
110.172.137.20:443
103.146.232.154:443
36.91.88.164:443
103.47.170.131:443
122.117.90.133:443
103.9.188.78:443
210.2.149.202:443
118.91.190.42:443
117.222.61.115:443
117.222.57.92:443
136.228.128.21:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
39c50026984c31249c9bfec0d247238ff278d796ded28a20ef9bba0d0bb67c60
-
Size
868KB
-
MD5
5e2209be4d3b9347f9c262ead6ebdd57
-
SHA1
773867dd63f9fe35eb252358cb9303fa9fed0c96
-
SHA256
39c50026984c31249c9bfec0d247238ff278d796ded28a20ef9bba0d0bb67c60
-
SHA512
03d97ccc2d6fc2c8186e6e37b3da18c50cde90e4d85e226971901fdce061f0487293e267f2468aa276921aa99cd2823b4f5c0fc019fff706d85a3f1e87caadd6
-
SSDEEP
12288:DEMkCMMFkUED6ANs4ZD9V63Az2hPmy+khUzJUP/m:m+ED6+xZzkmiiym
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-