Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_094242ed6164d7df09471b080df1ee06c6519276cd9efadcb4790b166d40042f
-
Size
436KB
-
Sample
241224-n65b7awrat
-
MD5
cfd66d3ed6b070767577467e366950c6
-
SHA1
e6728f71b6808138134a8b3c11654c73c138360a
-
SHA256
094242ed6164d7df09471b080df1ee06c6519276cd9efadcb4790b166d40042f
-
SHA512
e8a07cdb20ca3b82660ca22462527b41aeae6bd2d7a9f7d09b8f279375f1cc574d1002f4efb57ecc3f06ee586d5b371975b9c77f1049fd7aaecb08d6795b9343
-
SSDEEP
6144:pkVJ67Jhvuoo2bJhMZnctQTFE4QbXU9CkDotFMcMNBlNtEKLtc:pkVJIDvZ9lOFfQbXU9s79MNBjKotc
Malware Config
Extracted
trickbot
2000033
tot157
179.42.137.102:443
191.36.152.198:443
179.42.137.104:443
179.42.137.106:443
179.42.137.108:443
202.183.12.124:443
194.190.18.122:443
103.56.207.230:443
171.103.187.218:449
171.103.189.118:449
18.139.111.104:443
179.42.137.105:443
186.4.193.75:443
171.101.229.2:449
179.42.137.107:443
103.56.43.209:449
179.42.137.110:443
45.181.207.156:443
197.44.54.162:449
179.42.137.109:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
JaffaCakes118_094242ed6164d7df09471b080df1ee06c6519276cd9efadcb4790b166d40042f
-
Size
436KB
-
MD5
cfd66d3ed6b070767577467e366950c6
-
SHA1
e6728f71b6808138134a8b3c11654c73c138360a
-
SHA256
094242ed6164d7df09471b080df1ee06c6519276cd9efadcb4790b166d40042f
-
SHA512
e8a07cdb20ca3b82660ca22462527b41aeae6bd2d7a9f7d09b8f279375f1cc574d1002f4efb57ecc3f06ee586d5b371975b9c77f1049fd7aaecb08d6795b9343
-
SSDEEP
6144:pkVJ67Jhvuoo2bJhMZnctQTFE4QbXU9CkDotFMcMNBlNtEKLtc:pkVJIDvZ9lOFfQbXU9s79MNBjKotc
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-