General

  • Target

    JaffaCakes118_432ae3cce279c7c5749ca1a90411e846be4409877b139411f73980bf3df7e9d2

  • Size

    1.8MB

  • Sample

    241224-cbpsgaynbk

  • MD5

    4b487c6df521c15f008ab35497a3b18e

  • SHA1

    80d87b1dfbb914378d8b76b500814d12da42af3f

  • SHA256

    432ae3cce279c7c5749ca1a90411e846be4409877b139411f73980bf3df7e9d2

  • SHA512

    a23026053f501de8825c08d7ce802e65e3e6829e00e8c379288845fa7492e3a48c75391965c5a1a0af1a171ec03664cb8b844914b66dacd27eecfa22e0b04640

  • SSDEEP

    1536:0BOA0qKzBmromPgBqLxBqy5ZehAcITbk1fPeWnOCl/JPL48XpHv:0cFqKzBrtwq+ZPTbgmWnBJ4oVv

Malware Config

Extracted

Family

trickbot

Version

100021

Botnet

rob142

C2

181.129.85.98:443

189.112.119.205:443

189.51.118.78:443

186.121.214.106:443

49.176.188.184:443

61.69.102.170:443

213.32.252.221:443

89.46.216.2:443

103.36.79.3:443

103.108.97.51:443

95.140.217.242:443

41.175.22.226:443

190.109.169.161:443

186.159.12.18:443

190.109.171.17:443

181.196.148.202:443

186.47.75.58:443

186.42.212.30:443

190.214.21.14:443

187.108.32.133:443

Attributes
  • autorun

ecc_pubkey.base64
1
RUNTMzAAAABbfmkJRvwyw7iFkX40hL2HwsUeOSZZZo0FRRWGkY6J1+gf3YKq13Ee4sY3Jb9/0myCr0MwzNK1K2l5yuY87nW29Q/yjMJG0ISDj0HNBC3G+ZGta6Oi9QkjCwnNGbw2hQ4=

Targets

    • Target

      JaffaCakes118_432ae3cce279c7c5749ca1a90411e846be4409877b139411f73980bf3df7e9d2

    • Size

      1.8MB

    • MD5

      4b487c6df521c15f008ab35497a3b18e

    • SHA1

      80d87b1dfbb914378d8b76b500814d12da42af3f

    • SHA256

      432ae3cce279c7c5749ca1a90411e846be4409877b139411f73980bf3df7e9d2

    • SHA512

      a23026053f501de8825c08d7ce802e65e3e6829e00e8c379288845fa7492e3a48c75391965c5a1a0af1a171ec03664cb8b844914b66dacd27eecfa22e0b04640

    • SSDEEP

      1536:0BOA0qKzBmromPgBqLxBqy5ZehAcITbk1fPeWnOCl/JPL48XpHv:0cFqKzBrtwq+ZPTbgmWnBJ4oVv

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.