General
-
Target
ecd39fca6f8a0b09cc07f025aa4664a1_JaffaCakes118
-
Size
844KB
-
Sample
240920-ew4s8sydrq
-
MD5
ecd39fca6f8a0b09cc07f025aa4664a1
-
SHA1
8ebae18f3aa4dc2b1f7cfc48de5d6b5498a3c45c
-
SHA256
24bd33f4ba457d77d796620a2cd4b7a3e38d63e2286fec752d898ab7c5204e4b
-
SHA512
5d1e02761aca8627e94788d0341af016f6d2af63dbdd4bc0434a640bb723fec2454f4b7225837cc765bdc97f8929d3659ce076fa83cc31458314f55e0c662997
-
SSDEEP
6144:9W4GCPhnfLTgnwLGh63pOXgnxswabl4xB8rxuNBan5WQ:9W4VPhjcnZh586Bl4x6Gan5WQ
Malware Config
Extracted
trickbot
2000025
tot43
134.119.186.200:443
45.14.226.115:443
85.204.116.134:443
45.89.127.240:443
195.123.241.195:443
188.34.142.248:443
185.234.72.84:443
108.170.20.72:443
94.158.245.54:443
134.119.186.201:443
45.83.129.224:443
85.93.159.98:449
92.242.214.203:449
202.21.103.194:449
169.239.45.42:449
45.234.248.66:449
103.91.244.102:449
118.67.216.238:449
117.212.193.62:449
201.184.190.59:449
-
autorunName:pwgrab
Targets
-
-
Target
ecd39fca6f8a0b09cc07f025aa4664a1_JaffaCakes118
-
Size
844KB
-
MD5
ecd39fca6f8a0b09cc07f025aa4664a1
-
SHA1
8ebae18f3aa4dc2b1f7cfc48de5d6b5498a3c45c
-
SHA256
24bd33f4ba457d77d796620a2cd4b7a3e38d63e2286fec752d898ab7c5204e4b
-
SHA512
5d1e02761aca8627e94788d0341af016f6d2af63dbdd4bc0434a640bb723fec2454f4b7225837cc765bdc97f8929d3659ce076fa83cc31458314f55e0c662997
-
SSDEEP
6144:9W4GCPhnfLTgnwLGh63pOXgnxswabl4xB8rxuNBan5WQ:9W4VPhjcnZh586Bl4x6Gan5WQ
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-