Overview

overview

10

Static

static

5

JaffaCakes...a7.exe

windows7-x64

10

JaffaCakes...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_959948adae63fd46c460fa276e6a80a7

  • Size

    34KB

  • Sample

    250105-jpctdsxnhv

  • MD5

    959948adae63fd46c460fa276e6a80a7

  • SHA1

    76f2ee006fe888043c754bf7f54e352fd06e400a

  • SHA256

    ab2c3b13eb7e6a4778676adc4279b8faff9769b5e561de770bff0f8e2f1687ab

  • SHA512

    587c9f05075c35713458ff4bbf3b752ae653c16bd37b9d196d46f56b65c23b37402ba9f711e5d6bf0dd86e125bb2d1cf11e20423e089e1b6e7ce62e331bb2ed4

  • SSDEEP

    768:3p22qWFcy5XQ7lO41uirwA98p3MpkNBxd0cJWV6dy/x9J2:3pYoX58z1uirL98xMWnT0OQ9J2

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      JaffaCakes118_959948adae63fd46c460fa276e6a80a7

    • Size

      34KB

    • MD5

      959948adae63fd46c460fa276e6a80a7

    • SHA1

      76f2ee006fe888043c754bf7f54e352fd06e400a

    • SHA256

      ab2c3b13eb7e6a4778676adc4279b8faff9769b5e561de770bff0f8e2f1687ab

    • SHA512

      587c9f05075c35713458ff4bbf3b752ae653c16bd37b9d196d46f56b65c23b37402ba9f711e5d6bf0dd86e125bb2d1cf11e20423e089e1b6e7ce62e331bb2ed4

    • SSDEEP

      768:3p22qWFcy5XQ7lO41uirwA98p3MpkNBxd0cJWV6dy/x9J2:3pYoX58z1uirL98xMWnT0OQ9J2

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks