Overview

overview

10

Static

static

3

aa3c31c245...16.exe

windows7-x64

10

aa3c31c245...16.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa3c31c245b18322892493fd729631a0b2f340c714e886976056e08b7ac19516

  • Size

    460KB

  • Sample

    241124-n6xbksylb1

  • MD5

    999ce6924090d511ec7028052e72b59c

  • SHA1

    d65e3fc8beda50984019218bb0a06fcc3bc1514b

  • SHA256

    aa3c31c245b18322892493fd729631a0b2f340c714e886976056e08b7ac19516

  • SHA512

    67d4cec274e09950d98909c142b349bdeac9950aea5866ddcb44cf4ba6c74a33c4aa2253977668bd843dc1aee38615f4881729ca4671fb65cd1451179e39c9b3

  • SSDEEP

    6144:VJQZXnA9nIJwNyiQRsWLKaP9qmMVjaVQV87M393HwG+/dKPTfo:VJQZ3snHNyi4s4L4jaV/7u93HwV

Score
10/10
trickbottop139bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

top139

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      aa3c31c245b18322892493fd729631a0b2f340c714e886976056e08b7ac19516

    • Size

      460KB

    • MD5

      999ce6924090d511ec7028052e72b59c

    • SHA1

      d65e3fc8beda50984019218bb0a06fcc3bc1514b

    • SHA256

      aa3c31c245b18322892493fd729631a0b2f340c714e886976056e08b7ac19516

    • SHA512

      67d4cec274e09950d98909c142b349bdeac9950aea5866ddcb44cf4ba6c74a33c4aa2253977668bd843dc1aee38615f4881729ca4671fb65cd1451179e39c9b3

    • SSDEEP

      6144:VJQZXnA9nIJwNyiQRsWLKaP9qmMVjaVQV87M393HwG+/dKPTfo:VJQZ3snHNyi4s4L4jaV/7u93HwV

    Score
    10/10
    trickbottop139bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks