General

  • Target

    1535c258156f4569cdced1fd5a5f86a7e0a86014dd58f545a6759da205b46926.exe

  • Size

    110KB

  • Sample

    241117-lalh4axalp

  • MD5

    c9aba1e525a15ea56607390196d371ea

  • SHA1

    29b81fa3ff955cc760e6d0faa34c85225e379128

  • SHA256

    1535c258156f4569cdced1fd5a5f86a7e0a86014dd58f545a6759da205b46926

  • SHA512

    1c6ff7d3fe31373e8b8642cf6a125ea593b9c4839ee02ad860cecdbf6c5ac1313e2a2fadb658535e99faa6ff4d9d90dcbc9f4478f79cb16f2d061addc8c03185

  • SSDEEP

    1536:giLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EQ:giyvRmDLs/ZrwWJjAqGcRJ2hQ

Malware Config

Targets

    • Target

      1535c258156f4569cdced1fd5a5f86a7e0a86014dd58f545a6759da205b46926.exe

    • Size

      110KB

    • MD5

      c9aba1e525a15ea56607390196d371ea

    • SHA1

      29b81fa3ff955cc760e6d0faa34c85225e379128

    • SHA256

      1535c258156f4569cdced1fd5a5f86a7e0a86014dd58f545a6759da205b46926

    • SHA512

      1c6ff7d3fe31373e8b8642cf6a125ea593b9c4839ee02ad860cecdbf6c5ac1313e2a2fadb658535e99faa6ff4d9d90dcbc9f4478f79cb16f2d061addc8c03185

    • SSDEEP

      1536:giLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EQ:giyvRmDLs/ZrwWJjAqGcRJ2hQ

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

    • Tinba family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks