General
-
Target
3b2778f84ee974d842b95828b484dae9.zip
-
Size
454KB
-
Sample
240903-tftewssbjc
-
MD5
2edce769560711b7e497d0c73f97d776
-
SHA1
1d8420c4e265ec34a7553a7c41509cdb2d93bad3
-
SHA256
a166cebe65f1acede2038c07fbcc52246d225ef3300127c78ac363004f661158
-
SHA512
005c30e0d62e1974b147234045ed3b0d15095a2f38c75429f09e2f18009fef42a91914fc2f1a72e3a5abfe85eea4efb3a20e6309d94276fe315f7e766ab36028
-
SSDEEP
12288:6vbNQ5gjs1JyxGNo/Jr9k4KTQbFmxtA/C8Oo0qEqKxj:G81YxGN8ibPASo0qQj
Malware Config
Extracted
trickbot
2000035
lib166
36.91.117.231:443
36.89.228.201:443
103.75.32.173:443
45.115.172.105:443
36.95.23.89:443
103.123.86.104:443
202.65.119.162:443
202.9.121.143:443
139.255.65.170:443
110.172.137.20:443
103.146.232.154:443
36.91.88.164:443
103.47.170.131:443
122.117.90.133:443
103.9.188.78:443
210.2.149.202:443
118.91.190.42:443
117.222.61.115:443
117.222.57.92:443
136.228.128.21:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
33279af5b076a43bcea7bb23aaff15a19b54d9409ee6625e872b4c92c1495907
-
Size
868KB
-
MD5
3b2778f84ee974d842b95828b484dae9
-
SHA1
7f3a01bcdca862a7da0e352c9cd06ab98703bcd5
-
SHA256
33279af5b076a43bcea7bb23aaff15a19b54d9409ee6625e872b4c92c1495907
-
SHA512
257ab3407fa5b7329c0965f21651012695234cfbded99282223731abd9f402e5aa53dc70954719f80c3276ca35ecc134ac511d067e0c2938904c8c7c6a59f607
-
SSDEEP
12288:0cfkUmruxF02xWt5bSoV/XHx8B8a4TrTEChqNi9rkR/X:KI02x+LXHqB8aErPqC+X
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-