General
-
Target
f41b1289862ec6ca9477e2bde49a4f48.zip
-
Size
454KB
-
Sample
240901-1njc8asepr
-
MD5
a46fc9dcdabfe42e04eb0683890fdaf6
-
SHA1
46938d6af6527c30314862ae8ddb68b0dc2889be
-
SHA256
5d9be1f125dbcdab9d08dbb74bdc0ac3d3cd7c07917287faedf9a06d03b5d173
-
SHA512
3deef19e555be1aa7e17e176b6bb524239c327067add888e2122aa55538bff8357ede910301cc444f6cb9fa88a020b67aedbc029f6f305f96f838779ed6d6ff6
-
SSDEEP
12288:JGJeiVh/XpUZVSbjsa/95E+OrlttJOXcLm4:qeiVl5NbjsmQxrvOKb
Malware Config
Extracted
trickbot
2000035
lib166
36.91.117.231:443
36.89.228.201:443
103.75.32.173:443
45.115.172.105:443
36.95.23.89:443
103.123.86.104:443
202.65.119.162:443
202.9.121.143:443
139.255.65.170:443
110.172.137.20:443
103.146.232.154:443
36.91.88.164:443
103.47.170.131:443
122.117.90.133:443
103.9.188.78:443
210.2.149.202:443
118.91.190.42:443
117.222.61.115:443
117.222.57.92:443
136.228.128.21:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
1fa6d1ce684363dd45d42c623cdef7dd79db766a982270cba3168e4130888be8
-
Size
868KB
-
MD5
f41b1289862ec6ca9477e2bde49a4f48
-
SHA1
d21764b036097b8fcf579098c3590beeb9dfc7da
-
SHA256
1fa6d1ce684363dd45d42c623cdef7dd79db766a982270cba3168e4130888be8
-
SHA512
6f54d637ff86848f9793b4aefe40796dfaa449f970bfdade6ed3fb23705f1e0e8ac7dfea6ba0cdc1bc5af75ba0c3e3e70499a84a0bc4053895eff05405066a77
-
SSDEEP
12288:0cfkUmruxF02xWt5bSoV/XHx8B8a4TrTEChqNi9rkJ/9:KI02x+LXHqB8aErPqCC9
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-