Overview

overview

10

Static

static

3

33bcb28520...e7.dll

windows7-x64

10

33bcb28520...e7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33bcb2852052e405c859a076b02679a90dda28f99d9d11162f1e5a3df2c994e7.exe

  • Size

    706KB

  • Sample

    241122-zw1rssypg1

  • MD5

    932edae1704a08411f7b216819e082b8

  • SHA1

    83ee849f2ed12f82229e49c8eef87292355abf45

  • SHA256

    33bcb2852052e405c859a076b02679a90dda28f99d9d11162f1e5a3df2c994e7

  • SHA512

    77e3c88cd09edb96a1ad09ed614bc5af131c16bfd45774ebbc521fe3d214c6e756184458833dc1993e26594b98545083d92b852aaebb3d6dd79d6c4fc76156c5

  • SSDEEP

    12288:7NP2qgMhn9VbKac3cM15xIKR5pduDkgcKOuCEUz+ovYJXA8ZRA5cXO/+uBY2F0ce:RPp2abM15xIxD4KXJg/vYRbKDBhF1TSt

Score
10/10
trickbotrob136bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

rob136

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      33bcb2852052e405c859a076b02679a90dda28f99d9d11162f1e5a3df2c994e7.exe

    • Size

      706KB

    • MD5

      932edae1704a08411f7b216819e082b8

    • SHA1

      83ee849f2ed12f82229e49c8eef87292355abf45

    • SHA256

      33bcb2852052e405c859a076b02679a90dda28f99d9d11162f1e5a3df2c994e7

    • SHA512

      77e3c88cd09edb96a1ad09ed614bc5af131c16bfd45774ebbc521fe3d214c6e756184458833dc1993e26594b98545083d92b852aaebb3d6dd79d6c4fc76156c5

    • SSDEEP

      12288:7NP2qgMhn9VbKac3cM15xIKR5pduDkgcKOuCEUz+ovYJXA8ZRA5cXO/+uBY2F0ce:RPp2abM15xIxD4KXJg/vYRbKDBhF1TSt

    Score
    10/10
    trickbotrob136bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks