MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3e2874eee8a1a698d49b2c85ba6a35bd5623f1953ca7b348d3ec3fc916360cca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


TrickBot


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3e2874eee8a1a698d49b2c85ba6a35bd5623f1953ca7b348d3ec3fc916360cca
SHA3-384 hash: 3c00f4877bbcdc6f9637f422ec85dfba04f0f3bbd1146a5295ba9f56803d34b4ec4d5859762d1018dbf5665e3940c759
SHA1 hash: ead76b982ca20a18e8c1e4b669c808f22a74c779
MD5 hash: 10207f8d3c52d3a7b50c88d4e03221b5
humanhash: xray-sad-kilo-dakota
File name:SecuriteInfo.com.Trojan.Packed.140.25357.30472
Download: download sample
Signature TrickBot
Create hunting rule
File size:593'920 bytes
First seen:2020-06-20 02:34:20 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 6f0a80b8515de7f67188be23793fbab5 (14 x TrickBot)
ssdeep 12288:O6XuR7yk6zOPqVakU98MktuIvUrcxI+Fgt1jHxCx09RXB8qQPuzsV1gK0:O97yk6zOPqVakBuIvUrcxI+Fgt1jRCGz
Threatray 32 similar samples on MalwareBazaar
TLSH 44C47D37F6B8695EF15304B119B5A6B63E2ABC321019910FB380AF1C6972EC7B95131F
Reporter SecuriteInfoCom

Intelligence

File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Detection:
TrickBot
Create hunting rule
Link:
https://www.capesandbox.com/analysis/9873/
Detection(s):
SecuriteInfo.com.Trojan.Packed.140.25357.30472.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.TrickBot
Create hunting rule
Status:
Malicious
First seen:
2020-06-20 02:35:24 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
097bc53748a361c51142ae49dad68722f246826ca180351df793e9ea544a3d1c
TrickBot
0dc93ed0d66908d000b3690bad38429c220c089a891972b10b17fcc0acd7aad9
TrickBot
1fad523dab381f349b629778f1b48068ae469f9fa665f2ab2413a46f93c5778e
TrickBot
23315d8eab76bdf171f6021f6b0848654cbef87e1cd9c8be2b3a349744ba2c13
TrickBot
3f1fead406e75287bf07b6bb2147a8be5b1769b5dd8bf7ef49f5450fae849da0
TrickBot
636bd9e9ba2351bb905335e754e7d07e34d329ff8725f8d5a85facb9a88f181b
TrickBot
65638c2a88773a59a06131fb47e182e5b625b391eb1503faba47800b9db91827
TrickBot
8e0081e2bf17fc610c1d75650848999336bfd2f307cd22c24a9a3eacc9620b69
TrickBot
a36e57d89e8b04e21226b86e28db6d5c6e29002cc115da64b58e9c70eea4a0f0
TrickBot
febb5761ae671c134bac0b2542eeecd8c0cd779524fe3c64717f4160e1fbd375
TrickBot
+ 22 additional samples on MalwareBazaar
Result
Malware family:
trickbot
Create hunting rule
Score:
  10/10
Tags:
trojan banker family:trickbot
Link:
https://tria.ge/reports/200624-lvsb2dvhx6/
Behaviour
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Suspicious use of AdjustPrivilegeToken
Trickbot
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/9873/

Comments