Overview

overview

10

Static

static

3

519fc5551a...18.exe

windows7-x64

10

519fc5551a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

  • Size

    437KB

  • Sample

    241017-lwt3csseka

  • MD5

    519fc5551a9dc3632d37b3d968b7904d

  • SHA1

    f7a421340e37aeb63002bcbbe73753cc2915e903

  • SHA256

    e64fa69ab240beb65f9aa8228648fb061f9385a844db5dbc4dd53c30327f513c

  • SHA512

    2a39c56f4a793a72ebba5998d27bd78dbd2a661a22c9f87b8c03812c7b0aea1f2d2af4b464a0c6b655f1d90ea6d2dbc1e3793906e425205425704e56a162d8d4

  • SSDEEP

    12288:YGBboGFTywYhBxVV4lWK4KhBoC2AI5UNl:Y+boEywwB4z6BAYUD

Score
10/10
trickbotlib132bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

2000032

Botnet

lib132

C2

103.122.228.44:443

196.216.220.211:443

181.114.215.239:443

41.57.156.203:443

43.252.159.63:443

197.156.129.250:443

113.160.37.196:443

38.110.100.64:443

113.160.132.237:443

24.28.12.23:443

38.110.100.219:443

45.239.233.109:443

119.202.8.249:443

200.236.218.62:443

220.82.64.198:443

190.93.208.53:443

196.216.59.174:443

222.124.16.74:443

202.165.47.106:443

96.9.77.56:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      519fc5551a9dc3632d37b3d968b7904d_JaffaCakes118

    • Size

      437KB

    • MD5

      519fc5551a9dc3632d37b3d968b7904d

    • SHA1

      f7a421340e37aeb63002bcbbe73753cc2915e903

    • SHA256

      e64fa69ab240beb65f9aa8228648fb061f9385a844db5dbc4dd53c30327f513c

    • SHA512

      2a39c56f4a793a72ebba5998d27bd78dbd2a661a22c9f87b8c03812c7b0aea1f2d2af4b464a0c6b655f1d90ea6d2dbc1e3793906e425205425704e56a162d8d4

    • SSDEEP

      12288:YGBboGFTywYhBxVV4lWK4KhBoC2AI5UNl:Y+boEywwB4z6BAYUD

    Score
    10/10
    trickbotlib132bankerdiscoverytrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks