Overview

overview

10

Static

static

3

89296bdba2...41.exe

windows7-x64

10

89296bdba2...41.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_e2cfd7a1feedeb53cda174016821192939c04eb47a83fd1b897f38c811b17f3f

  • Size

    329KB

  • Sample

    241225-xvrrdstkh1

  • MD5

    295bdaaef4990249dd99dc896f00d285

  • SHA1

    96eab83763d9d1edd3b53cca1896c5df6695c4b4

  • SHA256

    e2cfd7a1feedeb53cda174016821192939c04eb47a83fd1b897f38c811b17f3f

  • SHA512

    ca0f957941aba438930ae410c18aa75ec79152018a293be4010226f88e1d73ca612535e930af346e2afabcf3d0f6e23f29f7f1e2a3dd2e4f685546367530abbb

  • SSDEEP

    6144:3iTUQtI6XkNmA8/fBcbWWZQQnnpa6ZncYEnp9ZIsc5bXJ9I5RssDBZ:yTU20NmbBuZtno6ZnDEnZIh5b5Wv9Dj

Score
10/10
trickbotmor124bankerdiscoverytrojan

Malware Config

Extracted

Family

trickbot

Version

1000514

Botnet

mor124

C2

51.89.163.40:443

89.223.126.186:443

45.67.231.68:443

148.251.185.165:443

194.87.110.144:443

213.32.84.27:443

185.234.72.35:443

45.89.125.148:443

195.123.240.104:443

185.99.2.243:443

5.182.211.223:443

195.123.240.113:443

85.204.116.173:443

5.152.210.188:443

103.36.48.103:449

36.94.33.102:449

36.91.87.227:449

177.190.69.162:449

103.76.169.213:449

179.97.246.23:449
Attributes
  • autorun
    Name:pwgrab
ecc_pubkey.base64

Targets

    • Target

      89296bdba2b808ddfd578d47fa86bf2ca4899362aa7ca4aa2018fb86c236f041.exe

    • Size

      540KB

    • MD5

      5e9dd8cfc460e06dc02066f8bc2e163f

    • SHA1

      d34e4b5712be208ae44620e8c354569cd56f65fa

    • SHA256

      89296bdba2b808ddfd578d47fa86bf2ca4899362aa7ca4aa2018fb86c236f041

    • SHA512

      518d14890ad8eb5b9d1ee77b24c5a98e5280676c8a8dca2a2167b8418483761f53688b4cb9ba7bafd436a4d6465b2cfbd8ac971e351a3a2b5b461ecbf587a9dc

    • SSDEEP

      12288:EssIG0GDuG1LSaSoBumwA6JqE5JfEn2FH:pmSCCJqE5JftH

    Score
    10/10
    trickbotmor124bankerdiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks