New Trick BOT Sample

2019-02-18

#Trickbot #upx packed loader



https://www.virustotal.com/#/file/72c2ab07c11bd7d3ff9fcd2265826937f86c88d3505b864b9013a69c5d354724/detection

unpacked:

https://www.virustotal.com/#/file/d9c7dc5b17fe24403c8dfe57fd383db2dc554db4840ce943ca004ac8efb086ab/detection



again a different bot payload:
https://www.virustotal.com/#/file/2074c27a07bec2903728c474769931a5aa640ac19a2e1af1150c983a666fa1f8/detection


#trickbot with new bot payload

initial loader:
https://www.virustotal.com/#/file-analysis/MWYwMjQ3NzI0YjlmYjM4NWE3NzU4YWEwMTkyODA1ZmY6MTU1MDQ4MTczOA==

new bot payload:
https://www.virustotal.com/#/file/80c6a233076648e696ccc1dfb9b8e0e2778a4439a64f0e6715ee75c0f237a85b/detection

very different code and header! as opposed to the usual:
https://www.virustotal.com/#/file/44102836046dbc537f3a18e625e071bdf3af300cf267caa9dee82dd589e3edd9/detection