Trusted Design

TrickBot's bag of tricks

概要

In this blog post, we’ll analyse a TrickBot binary with hash of 1bc7517f20b7b3e9d67c776f5e1bf7df. TrickBot has a hardcoded configuration by default and this is no different in our binary. Often, when communicating with the C2, TrickBot may download an updated configuration. In our case, the same hardcoded configuration remains used throughout the whole infection chain.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• TrickBot Update (score: 0.63)
• Trickbot DOC hashes (score: 0.63)
• Trickbot Banking Trojan's New WormShare Persistence Module (score: 0.60)
• HackTool:Win32/Hashenfill (score: 0.57)
• Tale of the Two Payloads – TrickBot and Nitol (score: 0.54)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る