General
- Target TrickBot.7z
- Size 44KB
- Sample261012-3hda5afc52
- SHA256 bc65b98c3fc6834aa40874ecea2463cb5ce5894635a694d83ff6f0f23cb8cae7
- MD5 eeb34a1c420111d29eb279f7eac852bb
- SHA1 beb8211f2af40e91564ab8f47d8a41cdbc35f100
- SHA512 eb0ed324c1fd1c9dcc6b5d0c7e67abca1d942593ab767d58ecc5f4ac241bcdd7f9c486368a1cb7b5506daf154afdbfd6ad5df8e78129e7ce33111cf8cdac983b
- SSDEEP 768:mfkQQtzxdwGvHFxPC49mBRyP4pHDYn5i8tfl0lDZqTJZT0VuoYTpHFGJZ21CAbVI:kkQQt5wu4pH8tNuZqlqQ5Zp5i4m
- TLSH T1FF23011FC56B7EB9674D1A9320785201420DAB8CFFA42E2514EA2D081377B8D85FE5F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3bf0f489250eaaa99100af4fd9cce3a23acf2b633c25f4571fb8078d4cb7c64d.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
3bf0f489250eaaa99100af4fd9cce3a23acf2b633c25f4571fb8078d4cb7c64d.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 3bf0f489250eaaa99100af4fd9cce3a23acf2b633c25f4571fb8078d4cb7c64d
- Size 192KB
- SHA256 3bf0f489250eaaa99100af4fd9cce3a23acf2b633c25f4571fb8078d4cb7c64d
- MD5 39bf48682793069ecca03d4eef46ecac
- SHA1 edc0a959b659659717af06157407015771f68bf5
- SHA512 7c98007283f55c1d4216c2033526920cec8896d7f4a1c7df50650a43bab9df7f4c3f6549241810213915a93fbe6e5c5d3eb1465b66bed092dd663fddcb6c2e2b
- SSDEEP 3072:AKvTOrKzbLOVyiRBKXu79eIsunG1zgMl8UXrhQcgx/:AKHGyTw9eZuG1Fl8irfgx/
- TLSH T1C714D52AF31BD0F8DD2764B2650BE2E76DFC7F018810AD4DCF455C19B929D1B0A24A69
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1