trickbot

Resubmissions

21-11-2024 22:49

241121-2rmqgsyncx 10

21-11-2024 22:48

241121-2q8xbsyncv 10

21-11-2024 22:47

241121-2q17gsynb1 10

21-11-2024 20:46

241121-zkkw7sxnbv 10

Sharing

Copy URL

Twitter E-mail

General

Target

e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe
Size

460KB
Sample

241121-zkkw7sxnbv
MD5

1ea6c706135b5f269892ce08293181ba
SHA1

18b8fc98df365b795fdf74eede58e53590084b75
SHA256

e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54
SHA512

81874e1314077b56782a59625db33297955d0b47514ed9115d6f0584af7b31250fa69c985e93f1c5b67c3d4c3a790a5dc3ba28325f5b8952f8e0b0bfb3e53f99
SSDEEP

6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYs8bt:b96Z/niySBVmZy2vuMJJr8k1IysdZcQq

Score

10^/10

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

lip139

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443

Attributes

autorun
Name:pwgrabb
Name:pwgrabc

ecc_pubkey.base64

Targets

- Target
  
  e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54.exe
- Size
  
  460KB
- MD5
  
  1ea6c706135b5f269892ce08293181ba
- SHA1
  
  18b8fc98df365b795fdf74eede58e53590084b75
- SHA256
  
  e284b1829c0e0502ed5051933375c0b35c67c4f134e3122abcdf1de91cc20a54
- SHA512
  
  81874e1314077b56782a59625db33297955d0b47514ed9115d6f0584af7b31250fa69c985e93f1c5b67c3d4c3a790a5dc3ba28325f5b8952f8e0b0bfb3e53f99
- SSDEEP
  
  6144:b96ZhRWIiMiCIF1DXBVmdCeyNAxR/oLgC+j9Jbnndik1IysdF3bQQYs8bt:b96Z/niySBVmZy2vuMJJr8k1IysdZcQq
Score

10^/10

trickbot lip139 banker discovery trojan
- Trickbot
  Developed in 2016, TrickBot is one of the more recent banking Trojans.
  trojan banker trickbot
- Trickbot family
  trickbot
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Extracted

Targets

Trickbot family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2