Overview

overview

10

Static

static

3

e20ecd0970...f8.exe

windows7-x64

10

e20ecd0970...f8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e20ecd0970ad604511e474abcb9e99651eb3d58531cb618d09ee5060b7b1e4f8.exe

  • Size

    432KB

  • Sample

    241123-w168lazmex

  • MD5

    04d1efc9b96cd71936d86401f84da400

  • SHA1

    8277d480ab704ce784276b4bdcd38887f256742f

  • SHA256

    e20ecd0970ad604511e474abcb9e99651eb3d58531cb618d09ee5060b7b1e4f8

  • SHA512

    ce771c5c4119554f5d2bf18ad5c8b18fb08a2dc09b6b276e6813a1d953768f290ce39d7028f6a6b68b52f7a151388dc5f7b4c2e1d7cc4b288b00eabac0b2fa71

  • SSDEEP

    12288:X4jg5ZqdXUF7UC6F5aY2V367CFqo/htsGRuywcO:Xf5ZqdXUF7UHh2Auqo/htsYwcO

Score
10/10
trickbotlib164bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

2000035

Botnet

lib164

C2

36.91.117.231:443

36.89.228.201:443

103.75.32.173:443

45.115.172.105:443

36.95.23.89:443

103.123.86.104:443

202.65.119.162:443

202.9.121.143:443

139.255.65.170:443

110.172.137.20:443

103.146.232.154:443

36.91.88.164:443

103.47.170.131:443

122.117.90.133:443

103.9.188.78:443

210.2.149.202:443

118.91.190.42:443

117.222.61.115:443

117.222.57.92:443

136.228.128.21:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      e20ecd0970ad604511e474abcb9e99651eb3d58531cb618d09ee5060b7b1e4f8.exe

    • Size

      432KB

    • MD5

      04d1efc9b96cd71936d86401f84da400

    • SHA1

      8277d480ab704ce784276b4bdcd38887f256742f

    • SHA256

      e20ecd0970ad604511e474abcb9e99651eb3d58531cb618d09ee5060b7b1e4f8

    • SHA512

      ce771c5c4119554f5d2bf18ad5c8b18fb08a2dc09b6b276e6813a1d953768f290ce39d7028f6a6b68b52f7a151388dc5f7b4c2e1d7cc4b288b00eabac0b2fa71

    • SSDEEP

      12288:X4jg5ZqdXUF7UC6F5aY2V367CFqo/htsGRuywcO:Xf5ZqdXUF7UHh2Auqo/htsYwcO

    Score
    10/10
    trickbotlib164bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks