Overview

overview

10

Static

static

5

abb82b0a5e...1N.exe

windows7-x64

10

abb82b0a5e...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abb82b0a5e0e9b9007d64cb2ccb7d0edf1b9d6070c328431c79af49f03bcfb61N.exe

  • Size

    110KB

  • Sample

    250101-zjwx3swjdp

  • MD5

    8893d490c7857e60807139c7b878cca0

  • SHA1

    fc977a3222b85a314e7d64b6d0cdd231279f64a9

  • SHA256

    abb82b0a5e0e9b9007d64cb2ccb7d0edf1b9d6070c328431c79af49f03bcfb61

  • SHA512

    94bbd42d9dab3ea078e375481cc4634e6f1a5830ba84eaa1e1e8b9855018ad0bd00c31bfbfa03eb97ea3a75d44863cf085a4d47b193e2b579738bed1c10fe1f0

  • SSDEEP

    1536:niLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:niyvRmDLs/ZrwWJjAqGcRJ2hg

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      abb82b0a5e0e9b9007d64cb2ccb7d0edf1b9d6070c328431c79af49f03bcfb61N.exe

    • Size

      110KB

    • MD5

      8893d490c7857e60807139c7b878cca0

    • SHA1

      fc977a3222b85a314e7d64b6d0cdd231279f64a9

    • SHA256

      abb82b0a5e0e9b9007d64cb2ccb7d0edf1b9d6070c328431c79af49f03bcfb61

    • SHA512

      94bbd42d9dab3ea078e375481cc4634e6f1a5830ba84eaa1e1e8b9855018ad0bd00c31bfbfa03eb97ea3a75d44863cf085a4d47b193e2b579738bed1c10fe1f0

    • SSDEEP

      1536:niLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:niyvRmDLs/ZrwWJjAqGcRJ2hg

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks