trickbot_config_decoder.py

Credit to Author: hasherezade| Date: Mon, 12 Nov 2018 15:00:22 +0000

Trojan.TrickBot has been present in the threat landscape from quite a while. We wrote about its first version in October 2016. From the beginning, it was a well organized modular malware, written by developers with mature skills. It is often called a banker, however its modular structure allows to freely add new functionalities without modifying… Categories: Malwarebytes news Tags: BotKeygandcrabgandcrab ransomwareIFL pluginpkcs11.txtpowershellprofiles.iniSecurityPreloadState.txtsvchostsvchost.exetrickbottrickbot_config_decoder.pyTrojan.TrickBotXOR layer (Read more…)

The post What’s new in TrickBot? Deobfuscating elements appeared first on Malwarebytes Labs.