Overview

overview

10

Static

static

3

8a4aeac136...18.exe

windows7-x64

10

8a4aeac136...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a4aeac136b26c4ae03fb62bc1f2c333_JaffaCakes118

  • Size

    760KB

  • Sample

    241103-ja96ca1pbm

  • MD5

    8a4aeac136b26c4ae03fb62bc1f2c333

  • SHA1

    2b446e94d3876a90fb398ceee36f595d346739b6

  • SHA256

    447f81782c5ec0ddd591a39b3312adacfca17ea97a161646f54ae7f3de334398

  • SHA512

    3a368b54292d07e521ec5ef2ed89d7be96ed552f6713067265faea777c7659e9399756a0d4d88cfca9dcc9677b123eabaeb87622be720450f75ac4e5619ff8cf

  • SSDEEP

    12288:3zgiXyC0EB3NGJw0888888888888888888888H0u7Kd6jIq+5ZWZXdSisd:UiXyC0m3KH888888888888888888888u

Score
10/10
trickbottop114bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

top114

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      8a4aeac136b26c4ae03fb62bc1f2c333_JaffaCakes118

    • Size

      760KB

    • MD5

      8a4aeac136b26c4ae03fb62bc1f2c333

    • SHA1

      2b446e94d3876a90fb398ceee36f595d346739b6

    • SHA256

      447f81782c5ec0ddd591a39b3312adacfca17ea97a161646f54ae7f3de334398

    • SHA512

      3a368b54292d07e521ec5ef2ed89d7be96ed552f6713067265faea777c7659e9399756a0d4d88cfca9dcc9677b123eabaeb87622be720450f75ac4e5619ff8cf

    • SSDEEP

      12288:3zgiXyC0EB3NGJw0888888888888888888888H0u7Kd6jIq+5ZWZXdSisd:UiXyC0m3KH888888888888888888888u

    Score
    10/10
    trickbottop114bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks