Overview

overview

10

Static

static

3

123.exe

windows7-x64

10

123.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_bfc53974de1ca52b0725a71a45eb51a7dbc5163e0abca460511e2058a7e6ce94

  • Size

    339KB

  • Sample

    241222-la19jssqbm

  • MD5

    89be327d9ff86a0ebb95ccb07eecf1a5

  • SHA1

    55abc688cfcd901d5fe95c24663f318af0ab6f5f

  • SHA256

    bfc53974de1ca52b0725a71a45eb51a7dbc5163e0abca460511e2058a7e6ce94

  • SHA512

    1522ac380ef39a884a3fa05de9e799eb011ea49841f6097ffebc7e11c1665e7ecf01c5c513e831aaed9d215eab98a8eddeb3fc47008e66169b9bc62af6d51c81

  • SSDEEP

    6144:hOqMcwemJEBcrl5vIFf4ZZE6a9aKXw3M1fq7ySkloe7SK9+XjhsGl1PDy+vOCf/t:hUcA5AFf4PE62ayfZSve7SKIXtsGnLth

Score
10/10
trickbotmor124bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

1000514

Botnet

mor124

C2

51.89.163.40:443

89.223.126.186:443

45.67.231.68:443

148.251.185.165:443

194.87.110.144:443

213.32.84.27:443

185.234.72.35:443

45.89.125.148:443

195.123.240.104:443

185.99.2.243:443

5.182.211.223:443

195.123.240.113:443

85.204.116.173:443

5.152.210.188:443

103.36.48.103:449

36.94.33.102:449

36.91.87.227:449

177.190.69.162:449

103.76.169.213:449

179.97.246.23:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      123.exe

    • Size

      676KB

    • MD5

      ab0942e4e1a30a52eb28a2338cfc9eb7

    • SHA1

      05b153cea47c2f9ee31d645d967ad54eb50ef9a9

    • SHA256

      b465cb3eec5644b9e0898bff7cf05a28f131394acfd5674d55c78813ca9b111c

    • SHA512

      fc6579402efbc49ca3d33b3a1de20d72387a4236ef494f447095410f47225d5be9d3463b23de411c4f357e84e1d205cdd0c0a2328f693353e16385b0e9aa81ce

    • SSDEEP

      12288:FacEfn98kB7xGEHuNACiMFL6hwsrwacEAf9n4vUDRtILD+lD7:Ic8n3fhhwGctnRYalP

    Score
    10/10
    trickbotmor124bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks