General
-
Target
JaffaCakes118_69389bee546fe735efe08fb5c70199fc9c683d7aa2d6d319178acac551061048
-
Size
381KB
-
Sample
241226-t8jfds1mcm
-
MD5
0fa5d3d2f76142457ed3fa09da32a89c
-
SHA1
e93f8866029d0a8ba8369fcf9c229e44009146cc
-
SHA256
69389bee546fe735efe08fb5c70199fc9c683d7aa2d6d319178acac551061048
-
SHA512
d729427be632453328276197a1a8c5d0c50e8d60b7e36d088e90336b253edefed353ac6006a81c4e47e446c9cb3c243a481e8b99ef8372995a670f0c4693cba0
-
SSDEEP
6144:BffnUr2PokG5ajQ9Wwp8ZmfaM+oPQPXKZaZ7FD8ZsvC8qKlgCWqN3CrCCecglHgM:BfMr2PoP5v9WwSige86ZkFD8ZRolgCWU
Malware Config
Targets
-
-
Target
7e29d464e336d904d8aee54edf8b499c4095c3659a8b202218903f071239d983.exe
-
Size
534KB
-
MD5
8f77e6489fa90273986d3a841bbdeb42
-
SHA1
312b86e00af45e187b52f2bf30b16233d882b7e8
-
SHA256
7e29d464e336d904d8aee54edf8b499c4095c3659a8b202218903f071239d983
-
SHA512
435e8da0737cf341532b4cbff6419efc2b96e70221bb58a7c191e53e7d262abea2028c33d579326c77abb9c1b4b8d4f67a94e1233c1ba9c4de71ab31d133d951
-
SSDEEP
12288:apjrxGmH5bmNi8QpjxDDawkCurdEtttYVLnAiHY:e3xD5DHpjpequrmGN14
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-
Trickbot x86 loader
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-