Overview

overview

10

Static

static

3

58550d1334...1b.dll

windows7-x64

10

58550d1334...1b.dll

windows10-2004-x64

10

Resubmissions

26-11-2024 01:36

241126-b1lxfaxkfs 10

25-11-2024 21:14

241125-z3fefatkhn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58550d13348ebb09fb99ba12dca64b1a20de993b4e2b1c636fca8ccbd96e541b.exe

  • Size

    223KB

  • Sample

    241126-b1lxfaxkfs

  • MD5

    c5c9a03dab0feb598ebb7aabf515a6df

  • SHA1

    5a20dde0c8de1a420c5632d609c581f1d999b401

  • SHA256

    58550d13348ebb09fb99ba12dca64b1a20de993b4e2b1c636fca8ccbd96e541b

  • SHA512

    b33b6844d31a1b8dd0c9123b28ee2fbe958d82a344589bad387f6b06a309959cf37644b726e6494f59ad07947484d1c091e25ec5498aca3f872298aa6015b8e3

  • SSDEEP

    6144:IDVCQUW9fVnUWSpsMtlTsHpqLoJ61Fyzh/:E0W9fed+MLsHpqEJsmh/

Score
10/10
trickbotsoh1bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

soh1

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      58550d13348ebb09fb99ba12dca64b1a20de993b4e2b1c636fca8ccbd96e541b.exe

    • Size

      223KB

    • MD5

      c5c9a03dab0feb598ebb7aabf515a6df

    • SHA1

      5a20dde0c8de1a420c5632d609c581f1d999b401

    • SHA256

      58550d13348ebb09fb99ba12dca64b1a20de993b4e2b1c636fca8ccbd96e541b

    • SHA512

      b33b6844d31a1b8dd0c9123b28ee2fbe958d82a344589bad387f6b06a309959cf37644b726e6494f59ad07947484d1c091e25ec5498aca3f872298aa6015b8e3

    • SSDEEP

      6144:IDVCQUW9fVnUWSpsMtlTsHpqLoJ61Fyzh/:E0W9fed+MLsHpqEJsmh/

    Score
    10/10
    trickbotsoh1bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks