Overview

overview

10

Static

static

3

58bc9e4899...86.exe

windows7-x64

10

58bc9e4899...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b36e2f155073eebc884c23fd4f6c64d8.zip

  • Size

    334KB

  • Sample

    240831-nhq5na1bna

  • MD5

    fb7cb42db8a73ca40e52c9de2bddffe1

  • SHA1

    f75dc796010ffa5792be222f6141ce1d59832c9d

  • SHA256

    941a0616230a8cce8078370848ebd1ff1f13a6e9cfdc6d031bfe56180c68fc10

  • SHA512

    74a0a1e2cf612398edeb7cb810dfefedddcb41e9620d0b879fedda6012fac03bc74a8154da288b5c7666abc95b5305900c4154771ba182b18a0f1b4850b1c3d3

  • SSDEEP

    6144:1AVDKNFtA1TK3587mqdJp6GGzYMWx9FlhbEfS7nAlXpnwK7m3uec:1wDKNFS1W55q7pLFFlESbAlXtHX

Score
10/10
trickbotlib157bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

2000033

Botnet

lib157

C2

179.42.137.102:443

191.36.152.198:443

179.42.137.104:443

179.42.137.106:443

179.42.137.108:443

202.183.12.124:443

194.190.18.122:443

103.56.207.230:443

171.103.187.218:449

171.103.189.118:449

18.139.111.104:443

179.42.137.105:443

186.4.193.75:443

171.101.229.2:449

179.42.137.107:443

103.56.43.209:449

179.42.137.110:443

45.181.207.156:443

197.44.54.162:449

179.42.137.109:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      58bc9e4899e959eefe6c29ac2504091b3f3bec3b9928976193788297b7d86686

    • Size

      436KB

    • MD5

      b36e2f155073eebc884c23fd4f6c64d8

    • SHA1

      75e8d15822d24e19db1da043f2bddc65f3678ae1

    • SHA256

      58bc9e4899e959eefe6c29ac2504091b3f3bec3b9928976193788297b7d86686

    • SHA512

      24e74045d96852d04454bd3befc4951ca6d59dc01b3f716e179fab9abc99f475a18b9f3f8cf3a38e27ed1e54eaeb530a4cf4577b947fdb7f0efa8653b0422880

    • SSDEEP

      12288:g0lJ4jP/i1pYE4yl/Pj0nY3nwWOQQ7akiEl0m1BSt:YjHiPYEFlj0nAeQM9iaDU

    Score
    10/10
    trickbotlib157bankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks