Overview

overview

10

Static

static

5

b1eeedf805...75.exe

windows7-x64

10

b1eeedf805...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1eeedf805b209ac03e921a35cf23dce1773da7a4d1bf92c57521e3a45696f75.exe

  • Size

    110KB

  • Sample

    250112-l66h5szrfk

  • MD5

    bf42fef5875564a3de266427ad66e41a

  • SHA1

    65679f4e5633d916e7d95d85512ce21c4eedbe7b

  • SHA256

    b1eeedf805b209ac03e921a35cf23dce1773da7a4d1bf92c57521e3a45696f75

  • SHA512

    2e29e4975a1c8fd70f64e27edd35b9b4d83ca1d6d7295b5b6664b8bd63bcf30829d18a1236d04db177ef7830d8ee1c560bf27b3a8e9f23a56833b2bb319976ee

  • SSDEEP

    1536:GiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:GiyvRmDLs/ZrwWJjAqGcRJ2hg

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      b1eeedf805b209ac03e921a35cf23dce1773da7a4d1bf92c57521e3a45696f75.exe

    • Size

      110KB

    • MD5

      bf42fef5875564a3de266427ad66e41a

    • SHA1

      65679f4e5633d916e7d95d85512ce21c4eedbe7b

    • SHA256

      b1eeedf805b209ac03e921a35cf23dce1773da7a4d1bf92c57521e3a45696f75

    • SHA512

      2e29e4975a1c8fd70f64e27edd35b9b4d83ca1d6d7295b5b6664b8bd63bcf30829d18a1236d04db177ef7830d8ee1c560bf27b3a8e9f23a56833b2bb319976ee

    • SSDEEP

      1536:GiLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0Eg:GiyvRmDLs/ZrwWJjAqGcRJ2hg

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks