General
-
Target
f57b990c78fc60e8abee387af02e1eeb.zip
-
Size
358KB
-
Sample
240901-rdzssatbjg
-
MD5
9167f9804f88d601760cbcc4ae682ed5
-
SHA1
282140a4fe76ae37318677b6f658b19060a11251
-
SHA256
0965f951dd3c38ef5dc6d155acd43e0b16a070cfd6573dddce95426b91106287
-
SHA512
016cc1ad31be624955376985a1b77c1ed057e8cb79da0e03756456b5b9e03e807dd250ccf7ba245f0948b4d14b9a4a70cc0bccc06f59b3faf1f71548e8cdf2c3
-
SSDEEP
6144:MmDta2MUwU2ZJHIi4zkO1tGsUPGYuAqNnSI7mY8q8IFUAhf1KN9yS/EZJjp:c4L2SVfKh7I6Y8LIF3yN0S/Il
Malware Config
Extracted
trickbot
100019
lip138
65.152.201.203:443
185.56.175.122:443
46.99.175.217:443
179.189.229.254:443
46.99.175.149:443
181.129.167.82:443
216.166.148.187:443
46.99.188.223:443
128.201.76.252:443
62.99.79.77:443
60.51.47.65:443
24.162.214.166:443
45.36.99.184:443
97.83.40.67:443
184.74.99.214:443
103.105.254.17:443
62.99.76.213:443
82.159.149.52:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
6011cbdfca9b2a880e9b024857df3effdbb61e3700a31363dc4b98106e194575
-
Size
616KB
-
MD5
f57b990c78fc60e8abee387af02e1eeb
-
SHA1
a9e72fd2f697fd8797f70041eb9064f4a4c24c9a
-
SHA256
6011cbdfca9b2a880e9b024857df3effdbb61e3700a31363dc4b98106e194575
-
SHA512
8b4af41eb434f87b20bbaf7bfa86b6850d9015a70bb1632dcb57f40de9155a3a43a59131e526b2e24ac1c12e2c2eb4eb6c653ee9e47d0b7ec9e898d814116e5a
-
SSDEEP
12288:7eoWdAMLC3CPidoZrhgzpvIikJZYotNtO:2dAM+UieZGzRIxZYJ
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-