General

  • Target

    a5d5541d92334c120813214b823c6f8111aab7ceb384147e07b5ca4fcea87745

  • Size

    110KB

  • Sample

    241214-yjh6jstqcp

  • MD5

    e4abbcfc17d35a6fc284f9cfa2d23911

  • SHA1

    dd38080f6ae9326dd343d17f2e447ed29b08f07b

  • SHA256

    a5d5541d92334c120813214b823c6f8111aab7ceb384147e07b5ca4fcea87745

  • SHA512

    0dfc9781fe7d62ff22c2558d70ad091beb2061e4a009330d8c9711fdef636690c30de0f895bebc1cc023014036e96c485e6f93ebc1a2cc2fef1e4bc37945e81b

  • SSDEEP

    1536:eiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:eiyvRmDLs/ZrwWJjAqGcRJ2hg

Malware Config

Targets

    • Target

      a5d5541d92334c120813214b823c6f8111aab7ceb384147e07b5ca4fcea87745

    • Size

      110KB

    • MD5

      e4abbcfc17d35a6fc284f9cfa2d23911

    • SHA1

      dd38080f6ae9326dd343d17f2e447ed29b08f07b

    • SHA256

      a5d5541d92334c120813214b823c6f8111aab7ceb384147e07b5ca4fcea87745

    • SHA512

      0dfc9781fe7d62ff22c2558d70ad091beb2061e4a009330d8c9711fdef636690c30de0f895bebc1cc023014036e96c485e6f93ebc1a2cc2fef1e4bc37945e81b

    • SSDEEP

      1536:eiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:eiyvRmDLs/ZrwWJjAqGcRJ2hg

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

    • Tinba family

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks