MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cb1ef8c3a4792e314a4a22711c8a3fd359d24f3c154cd933f756c812713186a5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence 1 File information 1 Yara Comments

SHA256 hash: cb1ef8c3a4792e314a4a22711c8a3fd359d24f3c154cd933f756c812713186a5
SHA3-384 hash: d89913767cd4324deaac967c6183596f94f57f0c07c6fb20101eb8463402f97362b0ac1239136d31cbd721ed1a7824e1
SHA1 hash: 330f2e36c6543bd5b17580dcdbf333e87cd92a74
MD5 hash: 9985e30d0c6a85362f52ce76527f4012
humanhash: connecticut-cold-football-blue
File name:update.dll
Download: download sample
Signature TrickBot
File size:683'520 bytes
First seen:2020-07-01 01:12:07 UTC
Last seen:2020-07-01 02:05:20 UTC
File type:DLL dll
MIME type:application/x-dosexec
imphash e2f96fb1ec05e67a1aab8c3377fed22b
ssdeep 12288:m7cmeYTWJ/Vm3jn+2OLE5gWk3uKBpIAf4CHEv6I:9YqJijuw5NKBVRH2
TLSH C4E4F6B70D31F025D96E1537FA89C7D23B2F9C90C711CACB668A01EE9A58DC6853532B
Reporter @malware_traffic
Tags:dll TrickBot


Mail intelligence No data
# of uploads 2
# of downloads 34
Origin country US US
CAPE Sandbox Detection:TrickBot
ClamAV PUA.Win.Downloader.Aiis-6803892-0
CERT.PL MWDB Detection:trickbot
ReversingLabs :Status:Malicious
Threat name:Win32.Trojan.Trickbot
First seen:2020-07-01 01:14:04 UTC
AV detection:20 of 31 (64.52%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
Hatching Triage Score:   10/10
Malware Family:trickbot
Tags:trojan banker family:trickbot
Config extraction:
VirusTotal:Virustotal results 5.63%

File information

The table below shows additional information about this malware sample such as delivery method and external references.