Overview

overview

10

Static

static

5

256fb8cb09...21.exe

windows7-x64

10

256fb8cb09...21.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    256fb8cb090a2de8a2ef776f1b8fd506a718ca74d34accc0c97100522fa90f21.exe

  • Size

    110KB

  • Sample

    250205-mm2lhsspbv

  • MD5

    990d12df137b318e7ae078de8e8a3cb1

  • SHA1

    638551be65055b29c151ec42fae75f1b31831782

  • SHA256

    256fb8cb090a2de8a2ef776f1b8fd506a718ca74d34accc0c97100522fa90f21

  • SHA512

    ed401ff4cd80b9229de91862b4488f4d27db730c655e4b34036a1e87f13df0ca68cd2cdfc5e6a97845d06d0eff708f162046f262a1bf427ac182a2789a08bc3e

  • SSDEEP

    1536:7iLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EQ:7iyvRmDLs/ZrwWJjAqGcRJ2hQ

Score
10/10
tinbabankerdiscoverypersistencetrojanupx

Malware Config

Targets

    • Target

      256fb8cb090a2de8a2ef776f1b8fd506a718ca74d34accc0c97100522fa90f21.exe

    • Size

      110KB

    • MD5

      990d12df137b318e7ae078de8e8a3cb1

    • SHA1

      638551be65055b29c151ec42fae75f1b31831782

    • SHA256

      256fb8cb090a2de8a2ef776f1b8fd506a718ca74d34accc0c97100522fa90f21

    • SHA512

      ed401ff4cd80b9229de91862b4488f4d27db730c655e4b34036a1e87f13df0ca68cd2cdfc5e6a97845d06d0eff708f162046f262a1bf427ac182a2789a08bc3e

    • SSDEEP

      1536:7iLOvRmmQegJfBbmAQ256/ZrwWnwqjhurmKFcxL8JQ2r0EQ:7iyvRmDLs/ZrwWJjAqGcRJ2hQ

    Score
    10/10
    tinbabankerdiscoverypersistencetrojanupx

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks