Phoenix
Sigma IntelligenceBeta
Emerging Threats
Malware2020

Trickbot

1Rules
2References
1Folders
2021-11-27Latest
Summary

Trickbot is tracked here as a malware family or toolset with 1 Sigma detection spanning 2020. Coverage centers on windows / process_creation.

Related Detections
Search this threat
Emerging Threathighstable

Trickbot Malware Activity

Detects Trickbot malware process tree pattern in which "rundll32.exe" is a parent of "wermgr.exe"

WindowsProcess Creation
TA0002 · ExecutionT1559 · Inter-Process Communicationdetection.emerging-threats
Florian Roth (Nextron Systems)Thu Nov 262020
References
1
Resolving title…
twitter.com
2
Resolving title…
app.any.run