Overview

overview

10

Static

static

3

2025-03-30...er.exe

windows7-x64

10

2025-03-30...er.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-30_8b6301e7e65fcabb79b37881b826cacb_amadey_rhadamanthys_smoke-loader

  • Size

    225KB

  • Sample

    250330-zjry5awydy

  • MD5

    8b6301e7e65fcabb79b37881b826cacb

  • SHA1

    44305436395406ab9aca69caf25cc40f3fa4a6a8

  • SHA256

    2a3cccf0f48a528810f1d7d5335a7f3457bd2b5ba3caa029fb33ea235ae57218

  • SHA512

    fad51c3cd4db70d5aab4749c7f46d86cd6f5874f2e21a708d8e2ba8d65f13a671937bd2039bd921844e812e7a8baadd40de21c896b893f3459bffbf44db5ed3e

  • SSDEEP

    6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:bATuTAnKGwUAW3ycQqgf

Score
10/10
tinbabankerdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      2025-03-30_8b6301e7e65fcabb79b37881b826cacb_amadey_rhadamanthys_smoke-loader

    • Size

      225KB

    • MD5

      8b6301e7e65fcabb79b37881b826cacb

    • SHA1

      44305436395406ab9aca69caf25cc40f3fa4a6a8

    • SHA256

      2a3cccf0f48a528810f1d7d5335a7f3457bd2b5ba3caa029fb33ea235ae57218

    • SHA512

      fad51c3cd4db70d5aab4749c7f46d86cd6f5874f2e21a708d8e2ba8d65f13a671937bd2039bd921844e812e7a8baadd40de21c896b893f3459bffbf44db5ed3e

    • SSDEEP

      6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:bATuTAnKGwUAW3ycQqgf

    Score
    10/10
    tinbabankerdiscoverypersistencetrojan

    • Tinba / TinyBanker

      Banking trojan which uses packet sniffing to steal data.

      trojanbankertinba

    • Tinba family

      tinba

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks