Overview

overview

10

Static

static

1

9010033790...69.vbs

windows7-x64

10

9010033790...69.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_bf100eeaa8749d9a492d0ef75ad7ab518d263848174e7760773fde7c11f37948

  • Size

    381KB

  • Sample

    241224-2lxnhazkgm

  • MD5

    6760c6a1bd24b422579d064add09e957

  • SHA1

    b50fc0662f6c1179b55c835c42d36d3460d116ea

  • SHA256

    bf100eeaa8749d9a492d0ef75ad7ab518d263848174e7760773fde7c11f37948

  • SHA512

    eab4bdf84b66993b4f427de8344e614b45fb7cad699786847b854b12ab5adce20025b743e748269f68bc14c9589bf3d63534150ed0b40f690bc04bbdd7ef5e47

  • SSDEEP

    6144:7Z/nT6F0zX9v+rlXmdtfkj1QCFJwkvIyIzVEW7W+900yAxGSfStOOwO1DUQ:FfVhWlmDfSXIBEAW+OtAxGSfcOOwO1DP

Score
10/10
trickbotbankerdefense_evasiondiscoverypackertrojan

Malware Config

Targets

    • Target

      90100337904166d873fb7d0b8ff6e9c0c156f15a09aa78f62019d7f4698ab069.vbs

    • Size

      974KB

    • MD5

      9519df9ae170e1beef2c4f132d2de878

    • SHA1

      6a4d0474f140bd912af3e53c1a3b977b7875f264

    • SHA256

      90100337904166d873fb7d0b8ff6e9c0c156f15a09aa78f62019d7f4698ab069

    • SHA512

      3f4010864e9ca3c591f34e865f293d9089ac616c369eb7a5378ce6970d03e7a4577a5e1377977e9bcc1459cfde347c7e3723e8e079404c7a328bd0f8b74a4d1b

    • SSDEEP

      24576:PUFUHaQAww6F0Rim/UXuunSPVFBES2BFBmkrD27hYDNfk5fW12+C/5IicxMi:d

    Score
    10/10
    trickbotbankerdefense_evasiondiscoverypackertrojan

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

      trojanbankertrickbot

    • Trickbot family

      trickbot

    • Templ.dll packer

      Detects Templ.dll packer which usually loads Trickbot.

      packer

    • Loads dropped DLL

    • Deobfuscate/Decode Files or Information

      Payload decoded via CertUtil.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks