General

  • Target

    JaffaCakes118_f3104f00c64cce223745c47a1389e0e79dc27ce9aae414ce0b70757200a1b788

  • Size

    2.2MB

  • Sample

    241224-rjnygazjhr

  • MD5

    f352cd23cf3c164a64941438b5b799f4

  • SHA1

    7bfcb960c88387762f18e53336e49e593652e54d

  • SHA256

    f3104f00c64cce223745c47a1389e0e79dc27ce9aae414ce0b70757200a1b788

  • SHA512

    98ff68562a7c1b113cab1096124d6f0f036f07137282c54834b20bbe2469c37cfa1a2644a5819e6205ff2d673e56fd04a5aeaf26acba12d45231a6e7128c2586

  • SSDEEP

    6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqJg:ZoidiofSth

Malware Config

Extracted

Family

trickbot

Version

100021

Botnet

rob142

C2

181.129.85.98:443

189.112.119.205:443

189.51.118.78:443

186.121.214.106:443

49.176.188.184:443

61.69.102.170:443

213.32.252.221:443

89.46.216.2:443

103.36.79.3:443

103.108.97.51:443

95.140.217.242:443

41.175.22.226:443

190.109.169.161:443

186.159.12.18:443

190.109.171.17:443

181.196.148.202:443

186.47.75.58:443

186.42.212.30:443

190.214.21.14:443

187.108.32.133:443

Attributes
  • autorun

ecc_pubkey.base64
1
RUNTMzAAAABbfmkJRvwyw7iFkX40hL2HwsUeOSZZZo0FRRWGkY6J1+gf3YKq13Ee4sY3Jb9/0myCr0MwzNK1K2l5yuY87nW29Q/yjMJG0ISDj0HNBC3G+ZGta6Oi9QkjCwnNGbw2hQ4=

Targets

    • Target

      JaffaCakes118_f3104f00c64cce223745c47a1389e0e79dc27ce9aae414ce0b70757200a1b788

    • Size

      2.2MB

    • MD5

      f352cd23cf3c164a64941438b5b799f4

    • SHA1

      7bfcb960c88387762f18e53336e49e593652e54d

    • SHA256

      f3104f00c64cce223745c47a1389e0e79dc27ce9aae414ce0b70757200a1b788

    • SHA512

      98ff68562a7c1b113cab1096124d6f0f036f07137282c54834b20bbe2469c37cfa1a2644a5819e6205ff2d673e56fd04a5aeaf26acba12d45231a6e7128c2586

    • SSDEEP

      6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqJg:ZoidiofSth

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.