General

  • Target

    c412d30e9486b803d994dbb3b0856210N.exe

  • Size

    45KB

  • Sample

    240816-r8paja1akb

  • MD5

    c412d30e9486b803d994dbb3b0856210

  • SHA1

    10a2906f4d8be1a81d8af4d6df0fe24b7c4c35b4

  • SHA256

    da628c21c97fe74bb51919b863883c9d0a2aa09ee08e1163d6bbc90fba0cb401

  • SHA512

    443904507ce7ba56814fc4cbb4b38651b80398d73e9dbab3b4043d803925299c593b7946da62a50dac603df2e301cc0c0d490f58d5fd800d598d1358ba40ddcb

  • SSDEEP

    768:JhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:TsWE9N5dFu53dsniQaB/xZ14n7zIF+qr

Malware Config

Targets

    • Target

      c412d30e9486b803d994dbb3b0856210N.exe

    • Size

      45KB

    • MD5

      c412d30e9486b803d994dbb3b0856210

    • SHA1

      10a2906f4d8be1a81d8af4d6df0fe24b7c4c35b4

    • SHA256

      da628c21c97fe74bb51919b863883c9d0a2aa09ee08e1163d6bbc90fba0cb401

    • SHA512

      443904507ce7ba56814fc4cbb4b38651b80398d73e9dbab3b4043d803925299c593b7946da62a50dac603df2e301cc0c0d490f58d5fd800d598d1358ba40ddcb

    • SSDEEP

      768:JhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:TsWE9N5dFu53dsniQaB/xZ14n7zIF+qr

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks