Overview

overview

10

Static

static

3

JaffaCakes...ac.dll

windows7-x64

10

JaffaCakes...ac.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_4e74468959b4113fcc40ec1f4d00f75c88eab09f70aabf62b0039c03276983ac

  • Size

    407KB

  • Sample

    241223-2gdptstnep

  • MD5

    d8c38896cea36b9140bf26f8e7b1aecc

  • SHA1

    d84aa43b3edf5bdb8169c48bd0541a97eb497b38

  • SHA256

    4e74468959b4113fcc40ec1f4d00f75c88eab09f70aabf62b0039c03276983ac

  • SHA512

    54312e42dc3eb1a1848f4a675bb3963cdf01d98de265558d6e96833ce4a8c64c4100b5fac948caf154d6aebe22c3174535dfd2496b7d3db3e4c9adce4cfb800c

  • SSDEEP

    12288:kApFD2vJhmDussycuLnnk5lB6OePjpTy84suq/:kqWh6hLk5TePFTN41q

Score
10/10
trickbottar3bankerdiscoverypackertrojan

Malware Config

Extracted

Family

trickbot

Version

100002

Botnet

tar3

C2

195.123.240.138:443

162.212.158.129:443

144.172.64.26:443

62.108.37.145:443

91.200.103.193:443

194.5.249.195:443

195.123.240.18:443
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      JaffaCakes118_4e74468959b4113fcc40ec1f4d00f75c88eab09f70aabf62b0039c03276983ac

    • Size

      407KB

    • MD5

      d8c38896cea36b9140bf26f8e7b1aecc

    • SHA1

      d84aa43b3edf5bdb8169c48bd0541a97eb497b38

    • SHA256

      4e74468959b4113fcc40ec1f4d00f75c88eab09f70aabf62b0039c03276983ac

    • SHA512

      54312e42dc3eb1a1848f4a675bb3963cdf01d98de265558d6e96833ce4a8c64c4100b5fac948caf154d6aebe22c3174535dfd2496b7d3db3e4c9adce4cfb800c

    • SSDEEP

      12288:kApFD2vJhmDussycuLnnk5lB6OePjpTy84suq/:kqWh6hLk5TePFTN41q

    Score
    10/10
    trickbottar3bankerdiscoverypackertrojan

    • Contacts Bazar domain

      Uses Emercoin blockchain domains associated with Bazar backdoor/loader.

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot family

      trickbot

    • Templ.dll packer

      Detects Templ.dll packer which usually loads Trickbot.

      packer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks