Overview

overview

10

Static

static

5

6ae63d46b3...d2.exe

windows7-x64

10

6ae63d46b3...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ae63d46b377086bcd5411834659199f38b6858a04cec11c37b2a4b1087cabd2.exe

  • Size

    45KB

  • Sample

    250111-2nk3gsvqcl

  • MD5

    ea0a65d6ba5a880a8be6fc482f89a7f4

  • SHA1

    959436c126e75051e0ac9c541742c08982e9e5f4

  • SHA256

    6ae63d46b377086bcd5411834659199f38b6858a04cec11c37b2a4b1087cabd2

  • SHA512

    0573cb951c9d9e1f7b9f6086be00ad958b19f562af6da65ad8e9a4dd9bbd7ade1997edff8be1474a52ccf96dd738258b3f28f1972155661baf27523b51753192

  • SSDEEP

    768:uhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2F:isWE9N5dFu53dsniQaB/xZ14n7zIF+qJ

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      6ae63d46b377086bcd5411834659199f38b6858a04cec11c37b2a4b1087cabd2.exe

    • Size

      45KB

    • MD5

      ea0a65d6ba5a880a8be6fc482f89a7f4

    • SHA1

      959436c126e75051e0ac9c541742c08982e9e5f4

    • SHA256

      6ae63d46b377086bcd5411834659199f38b6858a04cec11c37b2a4b1087cabd2

    • SHA512

      0573cb951c9d9e1f7b9f6086be00ad958b19f562af6da65ad8e9a4dd9bbd7ade1997edff8be1474a52ccf96dd738258b3f28f1972155661baf27523b51753192

    • SSDEEP

      768:uhP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2F:isWE9N5dFu53dsniQaB/xZ14n7zIF+qJ

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks