Overview

overview

10

Static

static

3

2024-09-03...id.exe

windows7-x64

10

2024-09-03...id.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-09-03_063c52da3072a2e66a9494a5af58a0dc_icedid

  • Size

    536KB

  • Sample

    240903-twcgbascmh

  • MD5

    063c52da3072a2e66a9494a5af58a0dc

  • SHA1

    a42b0615aa35d32fe315f8341020c2e6d15b9f3c

  • SHA256

    1342ebc377584f8abde6efa273ff2e0c0b2576c5a46020ea9fac63a2eedeaf8d

  • SHA512

    5f5113543719da3b2e459d132ac34b554306ae8292fcf5ff0566a59b4f478749c9b51332edb7aee5ddd24dedc81ef79875e69237bc4925339ffd6a5fbe11be9b

  • SSDEEP

    12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYo9BU5v8:ZXQUIsQpMsequrmGeBU5v8

Score
10/10
trickbotbankerdiscoverytrojan

Malware Config

Targets

    • Target

      2024-09-03_063c52da3072a2e66a9494a5af58a0dc_icedid

    • Size

      536KB

    • MD5

      063c52da3072a2e66a9494a5af58a0dc

    • SHA1

      a42b0615aa35d32fe315f8341020c2e6d15b9f3c

    • SHA256

      1342ebc377584f8abde6efa273ff2e0c0b2576c5a46020ea9fac63a2eedeaf8d

    • SHA512

      5f5113543719da3b2e459d132ac34b554306ae8292fcf5ff0566a59b4f478749c9b51332edb7aee5ddd24dedc81ef79875e69237bc4925339ffd6a5fbe11be9b

    • SSDEEP

      12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYo9BU5v8:ZXQUIsQpMsequrmGeBU5v8

    Score
    10/10
    trickbotbankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks