Overview

overview

10

Static

static

3

e84a5491a2...ad.exe

windows7-x64

10

e84a5491a2...ad.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e84a5491a297f451b2c93d748138a6be4a0f46149cddc21792a0b13627c790ad

  • Size

    460KB

  • Sample

    241121-wby6patdpb

  • MD5

    1e88e3f86cd5153081aef21ee050f119

  • SHA1

    d7eed74a337e9ebd630ba02d88395fdc518c97a0

  • SHA256

    e84a5491a297f451b2c93d748138a6be4a0f46149cddc21792a0b13627c790ad

  • SHA512

    c53b39c5f31038f9d819c30bc4149f333b4e5efb31db9ae328a32f302178dde01b46476b6eb9e73ea0884f9dfd14f8ccc3d96f419890beeec1d5d7bd6638bd3b

  • SSDEEP

    6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYszbE:b96Z/niySBVmZy2vuMJJr8k1IysdZcQ6

Score
10/10
trickbotlip139bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

lip139

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      e84a5491a297f451b2c93d748138a6be4a0f46149cddc21792a0b13627c790ad

    • Size

      460KB

    • MD5

      1e88e3f86cd5153081aef21ee050f119

    • SHA1

      d7eed74a337e9ebd630ba02d88395fdc518c97a0

    • SHA256

      e84a5491a297f451b2c93d748138a6be4a0f46149cddc21792a0b13627c790ad

    • SHA512

      c53b39c5f31038f9d819c30bc4149f333b4e5efb31db9ae328a32f302178dde01b46476b6eb9e73ea0884f9dfd14f8ccc3d96f419890beeec1d5d7bd6638bd3b

    • SSDEEP

      6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYszbE:b96Z/niySBVmZy2vuMJJr8k1IysdZcQ6

    Score
    10/10
    trickbotlip139bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks