TridentFactor

Below is an example for running TrickBot seems to emulating further than the test sample Binee@6ab1153bcb24:~/go/src/binee# ./binee ursnif/2019-09-26-1st-run-Trickbot-gtag-leo19-follow-up-malware-from-Ursnif-infection-1258460.exe [1] 0x20b12990: F LoadLibraryA(lpFileName = 'KERNEL32.DLL') = 0x20af0000 [1] 0x20b05f20: F GetProcAddress(hModule...