Resubmissions

08-10-2024 04:56

241008-fk1g4szdlr 10

29-09-2024 13:09

240929-qeaplswakm 10

General

  • Target

    c67752825726fbb0bde78631f61578a1a84a048cae434a822e23dfe680ac11cd

  • Size

    1.2MB

  • Sample

    241008-fk1g4szdlr

  • MD5

    a75e5ec8cb970751e03e89715d9376dd

  • SHA1

    757552baa41f16654dabeb2a0931ce27b65c4426

  • SHA256

    c67752825726fbb0bde78631f61578a1a84a048cae434a822e23dfe680ac11cd

  • SHA512

    b9d35cd5fb15c42741e0e05f8e7bd99d17468ec4d36e3297e37edbe6162b84a23327d026b98d3279c354c0f3faa8735410fc342a8694dc1c5c820196139b9f5e

  • SSDEEP

    24576:zQ5aILMCfmAUjzX6xQtjmssdqex1hl+dZXM:E5aIwC+Agr6StYCXM

Malware Config

Targets

    • Target

      c67752825726fbb0bde78631f61578a1a84a048cae434a822e23dfe680ac11cd

    • Size

      1.2MB

    • MD5

      a75e5ec8cb970751e03e89715d9376dd

    • SHA1

      757552baa41f16654dabeb2a0931ce27b65c4426

    • SHA256

      c67752825726fbb0bde78631f61578a1a84a048cae434a822e23dfe680ac11cd

    • SHA512

      b9d35cd5fb15c42741e0e05f8e7bd99d17468ec4d36e3297e37edbe6162b84a23327d026b98d3279c354c0f3faa8735410fc342a8694dc1c5c820196139b9f5e

    • SSDEEP

      24576:zQ5aILMCfmAUjzX6xQtjmssdqex1hl+dZXM:E5aIwC+Agr6StYCXM

    • KPOT

      KPOT is an information stealer that steals user data and account credentials.

    • KPOT Core Executable

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot x86 loader

      Detected Trickbot's x86 loader that unpacks the x86 payload.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks