Overview

overview

10

Static

static

5

f5ea71a3a5...eN.exe

windows7-x64

10

f5ea71a3a5...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5ea71a3a5a423c12e7f9c6df65ac4a9ea1f6552f7e4f93eacf20bb56e5c07aeN

  • Size

    45KB

  • Sample

    241022-nnbxxssfqf

  • MD5

    66002e4eb241628104287f1392cdb490

  • SHA1

    106905df54ee2e8a63f93970b7dc92ae096ee10b

  • SHA256

    f5ea71a3a5a423c12e7f9c6df65ac4a9ea1f6552f7e4f93eacf20bb56e5c07ae

  • SHA512

    a761ad99ed6b14829acab7509c145eeeb5f8ab30a0358c798db5485e7315512b32198102ad83df8c7e40d78acfeb726d890f337d48d4ab13f8a47ba309a01258

  • SSDEEP

    768:nhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:hsWE9N5dFu53dsniQaB/xZ14n7zIF+qr

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      f5ea71a3a5a423c12e7f9c6df65ac4a9ea1f6552f7e4f93eacf20bb56e5c07aeN

    • Size

      45KB

    • MD5

      66002e4eb241628104287f1392cdb490

    • SHA1

      106905df54ee2e8a63f93970b7dc92ae096ee10b

    • SHA256

      f5ea71a3a5a423c12e7f9c6df65ac4a9ea1f6552f7e4f93eacf20bb56e5c07ae

    • SHA512

      a761ad99ed6b14829acab7509c145eeeb5f8ab30a0358c798db5485e7315512b32198102ad83df8c7e40d78acfeb726d890f337d48d4ab13f8a47ba309a01258

    • SSDEEP

      768:nhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:hsWE9N5dFu53dsniQaB/xZ14n7zIF+qr

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks