Overview

overview

10

Static

static

5

e1b1d02fef...30.exe

windows7-x64

10

e1b1d02fef...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b1d02fef0abe3e0f313b0c49336bcee8493c1900d4bc1fb6ddec1685e56430.exe

  • Size

    45KB

  • Sample

    241122-r3hwkayman

  • MD5

    84ddeabba07abfb0dd89daadafb3cd91

  • SHA1

    18f21d3197456d8d2c40ff0f8ae07085dcdd80aa

  • SHA256

    e1b1d02fef0abe3e0f313b0c49336bcee8493c1900d4bc1fb6ddec1685e56430

  • SHA512

    9f874abbbf66829f4e18641e2397350b2de52c0af099e2d68fb68fb395a6fc70ae33e1b6a70f3e7b52049f529cad71388865e69415a2e49999f3d83ea87774af

  • SSDEEP

    768:lhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2H:3sWE9N5dFu53dsniQaB/xZ14n7zIF+qT

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      e1b1d02fef0abe3e0f313b0c49336bcee8493c1900d4bc1fb6ddec1685e56430.exe

    • Size

      45KB

    • MD5

      84ddeabba07abfb0dd89daadafb3cd91

    • SHA1

      18f21d3197456d8d2c40ff0f8ae07085dcdd80aa

    • SHA256

      e1b1d02fef0abe3e0f313b0c49336bcee8493c1900d4bc1fb6ddec1685e56430

    • SHA512

      9f874abbbf66829f4e18641e2397350b2de52c0af099e2d68fb68fb395a6fc70ae33e1b6a70f3e7b52049f529cad71388865e69415a2e49999f3d83ea87774af

    • SSDEEP

      768:lhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2H:3sWE9N5dFu53dsniQaB/xZ14n7zIF+qT

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks