Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
785617f5315561f2034bf990d528808988b490ec91a2342a7a0d67dd3ccb573b.zip
-
Size
380KB
-
Sample
250312-dawp3avmt4
-
MD5
dd5c96a783fa27e04b345717d0475971
-
SHA1
df9fdf5f29f99091d105d1adb0ead7dd25bced11
-
SHA256
785617f5315561f2034bf990d528808988b490ec91a2342a7a0d67dd3ccb573b
-
SHA512
b95067ae3ea512598527ec9f0041dd0405c470e046e5bc5f4617c6f4da7195a7f169efad722499c05412c542fdf3765356d6292c752a14bea8bb3e81f0ad1931
-
SSDEEP
6144:96ldOEfuE2rsw+AS+GyoBAhhC3e3pg22ZXieH4lyBGJOL8OaJTVbwVLbGEaZCR1:9eH2AtcoBMCO3peZXp4laGJIaJBbeLbd
Malware Config
Extracted
trickbot
100018
rob109
38.110.103.124:443
185.56.76.28:443
204.138.26.60:443
60.51.47.65:443
74.85.157.139:443
68.69.26.182:443
38.110.103.136:443
38.110.103.18:443
138.34.28.219:443
185.56.76.94:443
217.115.240.248:443
24.162.214.166:443
80.15.2.105:443
154.58.23.192:443
38.110.100.104:443
45.36.99.184:443
185.56.76.108:443
185.56.76.72:443
138.34.28.35:443
97.83.40.67:443
-
autorunName:pwgrabbName:pwgrabc
Targets
-
-
Target
9da8a5a0b5957db6112e927b607a8fd062b870f2132c4ae3442eb63235f789e1.dll
-
Size
544KB
-
MD5
47ba62ce119f28a55f90243a4dd8d324
-
SHA1
e12851dd2353651d4249a13b0cbc4ca1cc06e753
-
SHA256
9da8a5a0b5957db6112e927b607a8fd062b870f2132c4ae3442eb63235f789e1
-
SHA512
45fd10c913b02416d4b8dd10249c13e87de30c3fd99a52f27ecbc9634d10493d1c4da797f14c08fded3b3f98e0fea3ddf57164c8a9ceb562498d463d65f6c652
-
SSDEEP
6144:6nhWubOStZ6AbgmgwLp3gUhWeGtuOPc/woVPHma1MXohuPATdTpNSTrbkYW412ph:6nTltgBNwxgUXb/DGaXhu45pI3rep
Score10/10-
Trickbot
Developed in 2016, TrickBot is one of the more recent banking Trojans.
-
Trickbot family
-