General
-
Target
5b524d86ebaa78349fe78c3b1fa4688f.zip
-
Size
309KB
-
Sample
240903-y8hlbawejk
-
MD5
12b1a22e51bf38d4c242104bb7b93947
-
SHA1
0caf48b25b55d756cb545cd9d3033492819fd1f3
-
SHA256
2d86455dc91ec5d0f0ba188d8236208b67255c929e46721f61eb62f67cbb587a
-
SHA512
b4ce4961dd9872bffad5b4e67abed8e94f71409ca535fc9bb0ef7d53518a8131b480e62c72273f929211ec3bb7e4b041984b494914ee14944d8e199e1379045a
-
SSDEEP
6144:Ky8dCaMiUjocwWm/Ytz+SnkOF7xRNERka2wbQS2PdMqYG0bswz7T3QHnuk5y:ydCEjctCYQk7xHERkp0IdXc4wz7MDg
Malware Config
Extracted
trickbot
2000035
lib164
36.91.117.231:443
36.89.228.201:443
103.75.32.173:443
45.115.172.105:443
36.95.23.89:443
103.123.86.104:443
202.65.119.162:443
202.9.121.143:443
139.255.65.170:443
110.172.137.20:443
103.146.232.154:443
36.91.88.164:443
103.47.170.131:443
122.117.90.133:443
103.9.188.78:443
210.2.149.202:443
118.91.190.42:443
117.222.61.115:443
117.222.57.92:443
136.228.128.21:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
1cfc834c044d91d11e832c25f97eaf5b55161cbe184bde7b6f2e758fd0ec9913
-
Size
432KB
-
MD5
5b524d86ebaa78349fe78c3b1fa4688f
-
SHA1
ad4ede63db7e7a70623a8f15c0d9f6e20510c636
-
SHA256
1cfc834c044d91d11e832c25f97eaf5b55161cbe184bde7b6f2e758fd0ec9913
-
SHA512
dc3671f5320f498551ac04f8b32017c9903a12c8079ba280e642ba14c1cc3622bcfe55c4d7034d9d9bddc82414098ea028fa85006fe267bbceb8435d10b8f6c0
-
SSDEEP
12288:X4jg5ZqdXUe7UC6F5aY2V367CFqo/htsGRuywcR:Xf5ZqdXUe7UHh2Auqo/htsYwcR
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-