Overview

overview

10

Static

static

3

JaffaCakes...86.dll

windows7-x64

10

JaffaCakes...86.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_1c27177fbb4a528c6563223b49b72a628153678a7869975ba91bc6c4a4f56a86

  • Size

    440KB

  • Sample

    241222-xxxenawqfq

  • MD5

    283b0e6cc9327f04124fbddfec72a626

  • SHA1

    e7900f4330f4c51d9b3e5f33b52bd490e487fa85

  • SHA256

    1c27177fbb4a528c6563223b49b72a628153678a7869975ba91bc6c4a4f56a86

  • SHA512

    0d97831ddd03cc5bb9f380590bb30d3638ed6cb3a2b0c4173015e3dc9052e0367afb09ea49b41d51e6bb021ebdd503682952728642a8879c25f2764f365bb243

  • SSDEEP

    6144:v5+iRFTkRhO9SETtZtfherliYSuTNpBRaj4gzaxCdKJjWJFWMaDTX3H:JFTkitZTm4EBpL0zacMScx7

Score
10/10
trickbotrob141bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

100019

Botnet

rob141

C2

65.152.201.203:443

185.56.175.122:443

46.99.175.217:443

179.189.229.254:443

46.99.175.149:443

181.129.167.82:443

216.166.148.187:443

46.99.188.223:443

128.201.76.252:443

62.99.79.77:443

60.51.47.65:443

24.162.214.166:443

45.36.99.184:443

97.83.40.67:443

184.74.99.214:443

103.105.254.17:443

62.99.76.213:443

82.159.149.52:443
Attributes
  • autorun
    Name:pwgrabb
    Name:pwgrabc
ecc_pubkey.base64

Targets

    • Target

      JaffaCakes118_1c27177fbb4a528c6563223b49b72a628153678a7869975ba91bc6c4a4f56a86

    • Size

      440KB

    • MD5

      283b0e6cc9327f04124fbddfec72a626

    • SHA1

      e7900f4330f4c51d9b3e5f33b52bd490e487fa85

    • SHA256

      1c27177fbb4a528c6563223b49b72a628153678a7869975ba91bc6c4a4f56a86

    • SHA512

      0d97831ddd03cc5bb9f380590bb30d3638ed6cb3a2b0c4173015e3dc9052e0367afb09ea49b41d51e6bb021ebdd503682952728642a8879c25f2764f365bb243

    • SSDEEP

      6144:v5+iRFTkRhO9SETtZtfherliYSuTNpBRaj4gzaxCdKJjWJFWMaDTX3H:JFTkitZTm4EBpL0zacMScx7

    Score
    10/10
    trickbotrob141bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks