Overview

overview

10

Static

static

3

6011cbdfca...75.exe

windows7-x64

10

6011cbdfca...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0965f951dd3c38ef5dc6d155acd43e0b16a070cfd6573dddce95426b91106287

  • Size

    358KB

  • Sample

    240901-xm3tpazdla

  • MD5

    9167f9804f88d601760cbcc4ae682ed5

  • SHA1

    282140a4fe76ae37318677b6f658b19060a11251

  • SHA256

    0965f951dd3c38ef5dc6d155acd43e0b16a070cfd6573dddce95426b91106287

  • SHA512

    016cc1ad31be624955376985a1b77c1ed057e8cb79da0e03756456b5b9e03e807dd250ccf7ba245f0948b4d14b9a4a70cc0bccc06f59b3faf1f71548e8cdf2c3

  • SSDEEP

    6144:MmDta2MUwU2ZJHIi4zkO1tGsUPGYuAqNnSI7mY8q8IFUAhf1KN9yS/EZJjp:c4L2SVfKh7I6Y8LIF3yN0S/Il

Score
10/10
trickbotlip138bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

lip138

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      6011cbdfca9b2a880e9b024857df3effdbb61e3700a31363dc4b98106e194575

    • Size

      616KB

    • MD5

      f57b990c78fc60e8abee387af02e1eeb

    • SHA1

      a9e72fd2f697fd8797f70041eb9064f4a4c24c9a

    • SHA256

      6011cbdfca9b2a880e9b024857df3effdbb61e3700a31363dc4b98106e194575

    • SHA512

      8b4af41eb434f87b20bbaf7bfa86b6850d9015a70bb1632dcb57f40de9155a3a43a59131e526b2e24ac1c12e2c2eb4eb6c653ee9e47d0b7ec9e898d814116e5a

    • SSDEEP

      12288:7eoWdAMLC3CPidoZrhgzpvIikJZYotNtO:2dAM+UieZGzRIxZYJ

    Score
    10/10
    trickbotlip138bankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks