General
-
Target
JaffaCakes118_a4891637707f3a49a7e03ab409382059c42e631a612e0034af67cd54212fb80e
-
Size
404KB
-
Sample
241222-n8rtwaxphk
-
MD5
1b5bde8da44274e7df98d784d78b0ed4
-
SHA1
a5ea8db3b148d564b1143f9858f71c551aa355b7
-
SHA256
a4891637707f3a49a7e03ab409382059c42e631a612e0034af67cd54212fb80e
-
SHA512
9d5bab57c1ac5c6159b4d7fc555f1fcb7842df6e0c86353323a39de0257cfc512fe0bbdb187377ddcf17377b4f43dde98ee03b5d2f32a84e7b9dbc47838e29f3
-
SSDEEP
6144:s8OsFWjaU8VMA/goCRAQgs52YHKxk8E5CjyGMvIr5qygIRjgn5xYRKWet6+yX0o:LOs0PrV5oyGMQrIyRjWXry
Malware Config
Extracted
trickbot
1000513
mor118
51.89.177.20:443
194.5.249.174:443
107.174.196.242:443
185.205.209.241:443
82.146.46.220:443
5.34.178.126:443
212.22.70.65:443
195.123.241.90:443
185.164.32.214:443
198.46.198.139:443
195.123.241.187:443
86.104.194.116:443
195.123.240.252:443
185.164.32.215:443
45.148.120.195:443
45.138.158.32:443
5.149.253.99:443
92.62.65.163:449
88.247.212.56:449
180.211.170.214:449
-
autorunName:pwgrab
Targets
-
-
Target
JaffaCakes118_a4891637707f3a49a7e03ab409382059c42e631a612e0034af67cd54212fb80e
-
Size
404KB
-
MD5
1b5bde8da44274e7df98d784d78b0ed4
-
SHA1
a5ea8db3b148d564b1143f9858f71c551aa355b7
-
SHA256
a4891637707f3a49a7e03ab409382059c42e631a612e0034af67cd54212fb80e
-
SHA512
9d5bab57c1ac5c6159b4d7fc555f1fcb7842df6e0c86353323a39de0257cfc512fe0bbdb187377ddcf17377b4f43dde98ee03b5d2f32a84e7b9dbc47838e29f3
-
SSDEEP
6144:s8OsFWjaU8VMA/goCRAQgs52YHKxk8E5CjyGMvIr5qygIRjgn5xYRKWet6+yX0o:LOs0PrV5oyGMQrIyRjWXry
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-