General
-
Target
JaffaCakes118_611e0b0007141dc018b7b9df4e582c3512d1f1a6592013c2d32e43536ca532e6
-
Size
342KB
-
Sample
241222-qpefjszlcz
-
MD5
05ba050f9777a8c326671a8c6931f4f0
-
SHA1
a6e95d79c07e815cd638fc744b7550e087e78d03
-
SHA256
611e0b0007141dc018b7b9df4e582c3512d1f1a6592013c2d32e43536ca532e6
-
SHA512
7f7d114d51d5b73694fede24d7f6a0271982ea9538e09fcd603e06328d593e393336e9e2516864ff2c8e1d133692ec5288dac5d0a2a0ee6124bc2f8eec8c1a4c
-
SSDEEP
6144:Qr/syKDbLFTn71fJSaN5vrSTpa7yK1iiL1u+i9irrulPJGKmVrrSI2cEGx3gmEg/:m0yKD3RnGuZrM4eKlLfqJGKmFrSTxGxp
Malware Config
Extracted
trickbot
4294967042
chil150
51.89.163.40:443
89.223.126.186:443
45.67.231.68:443
148.251.185.165:443
194.87.110.144:443
213.32.84.27:443
185.234.72.35:443
45.89.125.148:443
195.123.240.104:443
185.99.2.243:443
5.182.211.223:443
195.123.240.113:443
85.204.116.173:443
5.152.210.188:443
103.36.48.103:449
36.94.33.102:449
36.91.87.227:449
177.190.69.162:449
103.76.169.213:449
179.97.246.23:449
-
autorunName:pwgrab
Targets
-
-
Target
ea5c72bce7e028a6b2f9febd90751bf0e323da00b4b0d68be2a52ed21fe2a4d0.exe
-
Size
640KB
-
MD5
ff47e6eb2602178a4306e4fcecb15b7d
-
SHA1
294ecaa563146f4ca75b676e13c05320066505b2
-
SHA256
ea5c72bce7e028a6b2f9febd90751bf0e323da00b4b0d68be2a52ed21fe2a4d0
-
SHA512
ee577364d660b48cb4a24dab1e9f892a81b5dc96c71b41dea71c211bbd6175e1af62a09e4da1ee23ff13afd60f4fa8116d259643113fbecfe863c38143dcea18
-
SSDEEP
6144:2t4BiH46o7+mL62Dx37sb+8i9U3RSmQRfBiHJToV0YblF+ytAq0StUt6F4qXL2HK:w4BKE9sbLi9U36fBKobKBStmHqXuQDL
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-