Overview

overview

10

Static

static

3

5fc9810e7c...00.exe

windows7-x64

10

5fc9810e7c...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5fa7204f9bf96b48e2f371fe532ac2f4334ee74490f3a17382956c0065f82fb

  • Size

    358KB

  • Sample

    240902-d7v5ss1gre

  • MD5

    d1aa51c1181df321722c48e8dd1299c8

  • SHA1

    954b8a29268af680aaa031841bbdbc912451f44d

  • SHA256

    b5fa7204f9bf96b48e2f371fe532ac2f4334ee74490f3a17382956c0065f82fb

  • SHA512

    f4760535811fe980f2e614df4b36304ce9432beb8e55b5696a1efd6b95a58f22d741cabdffa378088301ba178655c211151aae898bb80788913ef88b23a704c6

  • SSDEEP

    6144:GbLF2CS7/uML17VS/Zcf0REW7QQjWwsazZA/Rx5g0yp8EddpnSyKG3NKhtg1XHO:YSKg7VSxW4EWsIWUO5Xg0G8EzZSyK2Na

Score
10/10
trickbottop138bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

top138

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      5fc9810e7cb22807e89569d0864b32074b63fc2b53ebbeb97a8b9e4a703f3000

    • Size

      616KB

    • MD5

      7f275a789ee6c077979eed39235f1e6d

    • SHA1

      ee3b42d95bae450d9ad9328685501b8a9ed93ede

    • SHA256

      5fc9810e7cb22807e89569d0864b32074b63fc2b53ebbeb97a8b9e4a703f3000

    • SHA512

      0f2059aa7ac2a8869e253ad23b206f51eebacdf3244975d8c6e42c27e07a92eff52f2ca29ed14f00602c8a34c74379c454ce2676c1588f426559bc04edcf2dfc

    • SSDEEP

      12288:Z4jne1opolK5fFIjv+LmDs8ux5Rf/IoTtNtO05:4e1oWK5dBKD5KHIr0

    Score
    10/10
    trickbottop138bankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks