General
-
Target
b8e83093ea8f8cea2dafafbcec018931.zip
-
Size
454KB
-
Sample
240831-nnfk4s1dkm
-
MD5
9947e22db9dbed1a435cb791625c1df4
-
SHA1
fddaed33919dd827636e482ce6062c8fed959bdf
-
SHA256
2284196e437e465e721ec46751792ea954dc51bce24780a2188a4aca9dee88b4
-
SHA512
7e30d05534a84e076bcaa02d6c568a9a94c3aad38f46d1dedef41aff14e48c4aed893942cc727ae92963e112356e694bf07d03aa567e0f643661412ac1e9e37f
-
SSDEEP
12288:WOGLFHfdYpLGT319YB/K4ti1VswutpPe1IwQudUA:KxH1Yp83HWq8eu5W
Malware Config
Extracted
trickbot
2000035
lib166
36.91.117.231:443
36.89.228.201:443
103.75.32.173:443
45.115.172.105:443
36.95.23.89:443
103.123.86.104:443
202.65.119.162:443
202.9.121.143:443
139.255.65.170:443
110.172.137.20:443
103.146.232.154:443
36.91.88.164:443
103.47.170.131:443
122.117.90.133:443
103.9.188.78:443
210.2.149.202:443
118.91.190.42:443
117.222.61.115:443
117.222.57.92:443
136.228.128.21:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
a9bcc32f2d4f99da3c97b5a68830f26108b33dfe05b8d72514141925127f9cb2
-
Size
868KB
-
MD5
b8e83093ea8f8cea2dafafbcec018931
-
SHA1
e1184e453dd2dbcc8229ecbdfeb5a2bfcc7621b4
-
SHA256
a9bcc32f2d4f99da3c97b5a68830f26108b33dfe05b8d72514141925127f9cb2
-
SHA512
9fd8660aa02b68703d8648c14e7d8750b6f00a8ee10d726a162b0dc8af797e84d8cb8edb7d3bffeb9b652fa8aed9088fe296385b7c0ae2e20ff9b959d2c73e8b
-
SSDEEP
12288:0cfkUmruxF02xWt5bSoV/XHx8B8a4TrTEChqNi9rkf/4:KI02x+LXHqB8aErPqC44
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-