General

  • Target

    JaffaCakes118_1627fe0a5f906c12dc2cc44349213ecdec2bd5b90cd4fc9a9a8cc94e2420417e

  • Size

    2.2MB

  • Sample

    241225-w8bfwsskgy

  • MD5

    e8945465caefca82cb518f95f018b2a3

  • SHA1

    557d754f767b660d8c52638ccd43b7035bf76c91

  • SHA256

    1627fe0a5f906c12dc2cc44349213ecdec2bd5b90cd4fc9a9a8cc94e2420417e

  • SHA512

    65fbbbe0740df7d48a4d37698485b70a0c085c700081fa8d94ea5be28ad591c325e65b822ec8e01c0fd259476c38188cfa77217dd74556543d4ac38463e1b1e2

  • SSDEEP

    6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqjg:ZoidiofStL

Malware Config

Extracted

Family

trickbot

Version

100021

Botnet

rob142

C2

181.129.85.98:443

189.112.119.205:443

189.51.118.78:443

186.121.214.106:443

49.176.188.184:443

61.69.102.170:443

213.32.252.221:443

89.46.216.2:443

103.36.79.3:443

103.108.97.51:443

95.140.217.242:443

41.175.22.226:443

190.109.169.161:443

186.159.12.18:443

190.109.171.17:443

181.196.148.202:443

186.47.75.58:443

186.42.212.30:443

190.214.21.14:443

187.108.32.133:443

Attributes
  • autorun

ecc_pubkey.base64
1
RUNTMzAAAABbfmkJRvwyw7iFkX40hL2HwsUeOSZZZo0FRRWGkY6J1+gf3YKq13Ee4sY3Jb9/0myCr0MwzNK1K2l5yuY87nW29Q/yjMJG0ISDj0HNBC3G+ZGta6Oi9QkjCwnNGbw2hQ4=

Targets

    • Target

      JaffaCakes118_1627fe0a5f906c12dc2cc44349213ecdec2bd5b90cd4fc9a9a8cc94e2420417e

    • Size

      2.2MB

    • MD5

      e8945465caefca82cb518f95f018b2a3

    • SHA1

      557d754f767b660d8c52638ccd43b7035bf76c91

    • SHA256

      1627fe0a5f906c12dc2cc44349213ecdec2bd5b90cd4fc9a9a8cc94e2420417e

    • SHA512

      65fbbbe0740df7d48a4d37698485b70a0c085c700081fa8d94ea5be28ad591c325e65b822ec8e01c0fd259476c38188cfa77217dd74556543d4ac38463e1b1e2

    • SSDEEP

      6144:Zo0gTwr/cG3J8Wt/s1XGxfSCkq/vWc3Wh0lxPIerqjg:ZoidiofStL

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.