Overview

overview

10

Static

static

3

341f2b740c...0N.exe

windows7-x64

10

341f2b740c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    341f2b740c789f54c4dee43c874dae50N

  • Size

    517KB

  • Sample

    240908-tkxccavenm

  • MD5

    341f2b740c789f54c4dee43c874dae50

  • SHA1

    8c65f54694997784edcf527cd53e6b8c95d23073

  • SHA256

    4edc0727d011e67b65e9522f007d00d8485f75129c0990dffd90e997772be9c5

  • SHA512

    385f18f4d206c2c5dff56f00d470df8d8d88ec798a4a686f91eae43aacdc5e5a92441cd7bcc79dbbc0fc6347754a2c05b850125dc48bdd3b7a17b8da5b302855

  • SSDEEP

    12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYrhK+sf+p:ZXQUIsQpMsequrmGrMs

Score
10/10
trickbotbankerdiscoverytrojan

Malware Config

Targets

    • Target

      341f2b740c789f54c4dee43c874dae50N

    • Size

      517KB

    • MD5

      341f2b740c789f54c4dee43c874dae50

    • SHA1

      8c65f54694997784edcf527cd53e6b8c95d23073

    • SHA256

      4edc0727d011e67b65e9522f007d00d8485f75129c0990dffd90e997772be9c5

    • SHA512

      385f18f4d206c2c5dff56f00d470df8d8d88ec798a4a686f91eae43aacdc5e5a92441cd7bcc79dbbc0fc6347754a2c05b850125dc48bdd3b7a17b8da5b302855

    • SSDEEP

      12288:Zx1Q61iHsXYvfVpMODDawkCurdEtttYrhK+sf+p:ZXQUIsQpMsequrmGrMs

    Score
    10/10
    trickbotbankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks