Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ccd68df63f...19.exe

windows7-x64

10

ccd68df63f...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ccd68df63f0b4cd030fc9d1617ba4c0af36926b626996565503bfef2e9488019

  • Size

    148KB

  • Sample

    221126-1e1adafd58

  • MD5

    1dbeee8212ba715ab6c63937976c9404

  • SHA1

    b0c8f9326f575363275be2c7a1bab7b884e4e028

  • SHA256

    ccd68df63f0b4cd030fc9d1617ba4c0af36926b626996565503bfef2e9488019

  • SHA512

    93dac0afac2b95bbad99368811c2aea1ca6ef50a34f7bb70a183c70643f56fdf1fbbf1c13d21a9dbfc2f393c8e1e150cb86161f0cd30e66969887e7b5891897d

  • SSDEEP

    3072:utoxi/iMEn+t1u42T2P4JE15dydO5b6Q0lel2qX:umi/iMDtQRT2PvpWwMqX

Score
10/10
tinbabankerpersistencetrojan

Malware Config

Targets

    • Target

      ccd68df63f0b4cd030fc9d1617ba4c0af36926b626996565503bfef2e9488019

    • Size

      148KB

    • MD5

      1dbeee8212ba715ab6c63937976c9404

    • SHA1

      b0c8f9326f575363275be2c7a1bab7b884e4e028

    • SHA256

      ccd68df63f0b4cd030fc9d1617ba4c0af36926b626996565503bfef2e9488019

    • SHA512

      93dac0afac2b95bbad99368811c2aea1ca6ef50a34f7bb70a183c70643f56fdf1fbbf1c13d21a9dbfc2f393c8e1e150cb86161f0cd30e66969887e7b5891897d

    • SSDEEP

      3072:utoxi/iMEn+t1u42T2P4JE15dydO5b6Q0lel2qX:umi/iMDtQRT2PvpWwMqX

    Score
    10/10
    tinbabankerpersistencetrojan

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks