Overview

overview

10

Static

static

5

dda9492c74...83.exe

windows7-x64

10

dda9492c74...83.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dda9492c7453b40215990fc36578bce90a68c1f302a5001d471ff0d84b4b9383.exe

  • Size

    160KB

  • Sample

    241123-hq7vgsxjcj

  • MD5

    ac6a264b7cc7cedabbc39db4400d9868

  • SHA1

    f053c89d60c498c0302e63d1c516bd7e77896276

  • SHA256

    dda9492c7453b40215990fc36578bce90a68c1f302a5001d471ff0d84b4b9383

  • SHA512

    3e10f4d851e338dc37114ad7f5e4d79de58dd3ba4fed1f7b8fea36e5fb64e5226b8e0988a9e20b8d900745d6acf486a983a7c3d8b966d46a6c24db29b86a0092

  • SSDEEP

    1536:DEY+mFM2HXKZgi0Iksu+XM5/HtAQ9J6xph0:AY+4MiIkLZJNAQ9J6v6

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      dda9492c7453b40215990fc36578bce90a68c1f302a5001d471ff0d84b4b9383.exe

    • Size

      160KB

    • MD5

      ac6a264b7cc7cedabbc39db4400d9868

    • SHA1

      f053c89d60c498c0302e63d1c516bd7e77896276

    • SHA256

      dda9492c7453b40215990fc36578bce90a68c1f302a5001d471ff0d84b4b9383

    • SHA512

      3e10f4d851e338dc37114ad7f5e4d79de58dd3ba4fed1f7b8fea36e5fb64e5226b8e0988a9e20b8d900745d6acf486a983a7c3d8b966d46a6c24db29b86a0092

    • SSDEEP

      1536:DEY+mFM2HXKZgi0Iksu+XM5/HtAQ9J6xph0:AY+4MiIkLZJNAQ9J6v6

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks