Overview

overview

10

Static

static

5

53897af4e2...eN.exe

windows7-x64

10

53897af4e2...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53897af4e2ace67941971c55fff848fd39c792c2a7008b757d0d0897f3229afeN.exe

  • Size

    45KB

  • Sample

    241211-f7se1sypdv

  • MD5

    b78b23e121c59b6547e441d0fe8199d0

  • SHA1

    6ad56b7c430ed184b8ae9d2c7e93ff0c1c69c48a

  • SHA256

    53897af4e2ace67941971c55fff848fd39c792c2a7008b757d0d0897f3229afe

  • SHA512

    ed4b5626bd35eeb30f759e2b6c583b5325601336dbdc9bb0cfe33b14c98f787444064ea59a8d738852fe04278082793dac2c9126c89201c9765f8757ac445e21

  • SSDEEP

    768:ohP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2/:UsWE9N5dFu53dsniQaB/xZ14n7zIF+qL

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      53897af4e2ace67941971c55fff848fd39c792c2a7008b757d0d0897f3229afeN.exe

    • Size

      45KB

    • MD5

      b78b23e121c59b6547e441d0fe8199d0

    • SHA1

      6ad56b7c430ed184b8ae9d2c7e93ff0c1c69c48a

    • SHA256

      53897af4e2ace67941971c55fff848fd39c792c2a7008b757d0d0897f3229afe

    • SHA512

      ed4b5626bd35eeb30f759e2b6c583b5325601336dbdc9bb0cfe33b14c98f787444064ea59a8d738852fe04278082793dac2c9126c89201c9765f8757ac445e21

    • SSDEEP

      768:ohP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2/:UsWE9N5dFu53dsniQaB/xZ14n7zIF+qL

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks