Overview

overview

10

Static

static

3

b993f03be6...12.exe

windows7-x64

10

b993f03be6...12.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b993f03be6cbdf51e2e97c889731e2251680073ac4845e3e319c2f41dec6d012.exe

  • Size

    432KB

  • Sample

    241123-flg26ayngy

  • MD5

    11f0ddc2df823a18f9ba43e2889b5407

  • SHA1

    b0a8b60ab5d1f76219bdd402c305c8de00c46be7

  • SHA256

    b993f03be6cbdf51e2e97c889731e2251680073ac4845e3e319c2f41dec6d012

  • SHA512

    08f6370269c8079abd8760834b1ad17b2fa6d01a3828954714dbdc9c4d0eea082f789cc67ec1967e6fecf3ba1b85097024bb63e4ed5173170aadb64aaa0e003a

  • SSDEEP

    12288:X4jg5ZqdXUB7UC6F5aY2V367CFqo/htsGRuywcF:Xf5ZqdXUB7UHh2Auqo/htsYwcF

Score
10/10
trickbotlib164bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

2000035

Botnet

lib164

C2

36.91.117.231:443

36.89.228.201:443

103.75.32.173:443

45.115.172.105:443

36.95.23.89:443

103.123.86.104:443

202.65.119.162:443

202.9.121.143:443

139.255.65.170:443

110.172.137.20:443

103.146.232.154:443

36.91.88.164:443

103.47.170.131:443

122.117.90.133:443

103.9.188.78:443

210.2.149.202:443

118.91.190.42:443

117.222.61.115:443

117.222.57.92:443

136.228.128.21:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      b993f03be6cbdf51e2e97c889731e2251680073ac4845e3e319c2f41dec6d012.exe

    • Size

      432KB

    • MD5

      11f0ddc2df823a18f9ba43e2889b5407

    • SHA1

      b0a8b60ab5d1f76219bdd402c305c8de00c46be7

    • SHA256

      b993f03be6cbdf51e2e97c889731e2251680073ac4845e3e319c2f41dec6d012

    • SHA512

      08f6370269c8079abd8760834b1ad17b2fa6d01a3828954714dbdc9c4d0eea082f789cc67ec1967e6fecf3ba1b85097024bb63e4ed5173170aadb64aaa0e003a

    • SSDEEP

      12288:X4jg5ZqdXUB7UC6F5aY2V367CFqo/htsGRuywcF:Xf5ZqdXUB7UHh2Auqo/htsYwcF

    Score
    10/10
    trickbotlib164bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks