Overview

overview

10

Static

static

3

d1d8b2c0f5...5b.dll

windows7-x64

10

d1d8b2c0f5...5b.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1d8b2c0f598fd4e0838c32a0930a33d3f47f342499ca0ef30e31d981f99805b

  • Size

    516KB

  • Sample

    241027-cnyk5sscla

  • MD5

    405349e989cf4377b74989fa5caa55f6

  • SHA1

    9abd670d7373542189b442819419da2d0a205269

  • SHA256

    d1d8b2c0f598fd4e0838c32a0930a33d3f47f342499ca0ef30e31d981f99805b

  • SHA512

    b841547b4336984440b44df068dfa6dd8fff07e812036cca9589ca0ae58a91bf8cd9ab7f14a768c318b514df6c786c79f05592475b6b0115c898ee1089e53024

  • SSDEEP

    12288:VE2DFZrTO3XK3jLOBWTNvFD1VeubeMl2005W7eQT:VrrTO363WwZv91VeAlXw

Score
10/10
trickbotsat2bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100018

Botnet

sat2

C2

38.110.103.124:443

185.56.76.28:443

204.138.26.60:443

60.51.47.65:443

74.85.157.139:443

68.69.26.182:443

38.110.103.136:443

38.110.103.18:443

138.34.28.219:443

185.56.76.94:443

217.115.240.248:443

24.162.214.166:443

80.15.2.105:443

154.58.23.192:443

38.110.100.104:443

45.36.99.184:443

185.56.76.108:443

185.56.76.72:443

138.34.28.35:443

97.83.40.67:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      d1d8b2c0f598fd4e0838c32a0930a33d3f47f342499ca0ef30e31d981f99805b

    • Size

      516KB

    • MD5

      405349e989cf4377b74989fa5caa55f6

    • SHA1

      9abd670d7373542189b442819419da2d0a205269

    • SHA256

      d1d8b2c0f598fd4e0838c32a0930a33d3f47f342499ca0ef30e31d981f99805b

    • SHA512

      b841547b4336984440b44df068dfa6dd8fff07e812036cca9589ca0ae58a91bf8cd9ab7f14a768c318b514df6c786c79f05592475b6b0115c898ee1089e53024

    • SSDEEP

      12288:VE2DFZrTO3XK3jLOBWTNvFD1VeubeMl2005W7eQT:VrrTO363WwZv91VeAlXw

    Score
    10/10
    trickbotsat2bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks