General

  • Target

    HEUR-Trojan-Banker.Win64.Trickster.gen-1e1ade90e013ef2bfff89c4dc84e9258e35b7794105ed793370b81e778404d2d.7z

  • Size

    335KB

  • Sample

    250302-zfqxnavkv5

  • MD5

    d2d18e7e35cce588bf6779594f937bcb

  • SHA1

    f4ababc87154a0d123f9d48649fdeb45efeacb6e

  • SHA256

    b643e2f6d21b98fbdfe6f92b99d46fcd9cbc2495db75f2c903ae974af32d9e2b

  • SHA512

    3394cced8ef623bfcc3e62daeb781e7f677afbf4c87a3d4ec089597a816f79d676d04f9f77d8417089e433d456eb3b4edb80bcad69ae46519a28828be4d473a0

  • SSDEEP

    6144:Z9wvdT+2uGWv2bsBf10dx328KFkp9zDbuZJXbPGIFyrDcK4tz/HlVwxezB1:mRud2bAf10dROFC/uruIFynclZN

Malware Config

Targets

    • Target

      HEUR-Trojan-Banker.Win64.Trickster.gen-1e1ade90e013ef2bfff89c4dc84e9258e35b7794105ed793370b81e778404d2d.7z

    • Size

      335KB

    • MD5

      d2d18e7e35cce588bf6779594f937bcb

    • SHA1

      f4ababc87154a0d123f9d48649fdeb45efeacb6e

    • SHA256

      b643e2f6d21b98fbdfe6f92b99d46fcd9cbc2495db75f2c903ae974af32d9e2b

    • SHA512

      3394cced8ef623bfcc3e62daeb781e7f677afbf4c87a3d4ec089597a816f79d676d04f9f77d8417089e433d456eb3b4edb80bcad69ae46519a28828be4d473a0

    • SSDEEP

      6144:Z9wvdT+2uGWv2bsBf10dx328KFkp9zDbuZJXbPGIFyrDcK4tz/HlVwxezB1:mRud2bAf10dROFC/uruIFynclZN

    • Trickbot

      Developed in 2016, TrickBot is one of the more recent banking Trojans.

    • Trickbot family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks