The Tetrade: Brazilian banking malware goes global
Tags
country: Brazil Chile China Colombia Uruguay Ecuador Spain Laos Mexico Peru Portugal
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Credentials - T1589.001 Dll Search Order Hijacking - T1574.001 Javascript - T1059.007 Local Groups - T1069.001 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Process Hollowing - T1055.012 Server - T1583.004 Server - T1584.004 Vnc - T1021.005 Visual Basic - T1059.005 Tool - T1588.002 Dll Search Order Hijacking - T1038 Process Hollowing - T1093
Show in Graph
Common Information
Type Value
UUID 2d17f095-6b47-4d5a-bb78-591e0a624e43
Fingerprint 3c5419918d37a68f
Analysis status DONE
Considered CTI value 2
Text language
Published July 14, 2020, 10 a.m.
Added to db Sept. 11, 2022, 12:41 p.m.
Last updated Nov. 17, 2024, 6:55 p.m.
Headline The Tetrade: Brazilian banking malware goes global
Title The Tetrade: Brazilian banking malware goes global
Detected Hints/Tags/Attributes 116/3/47
Source URLs
Redirection Url
Details Source https://securelist.com/the-tetrade-brazilian-banking-malware/97779/
URL Provider
Details Provider Source level domain
Details securelist.com securelist.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
01autogestor.ga
Details Domain 1 
ghcco980m1zy9.org
Details Domain 1 
04autogestor.ml
Details Domain 1 
gurulea8.ml
Details Domain 1 
0ff2mft71jarf.gq
Details Domain 1 
k8cf0j5u.cf
Details Domain 1 
2va6v.6pnc3461.ink
Details Domain 1 
kaligodfrey.casa
Details Domain 1 
4nk7h3s453b019.com.de
Details Domain 1 
kfgkqnf5.cf
Details Domain 1 
64pgrpyxpueoj.ga
Details Domain 1 
nfiru.xyz
Details Domain 1 
6pnc3461.ink
Details Domain 1 
osieofcorizon.fun
Details Domain 1 
6zs1njbw.ml
Details Domain 1 
paiuew.bnorp.ml
Details Domain 1 
7wpinibw.ml
Details Domain 1 
peolplefortalce.gq
Details Domain 1 
84m4bl423.space
Details Domain 1 
topgear.cf
Details Domain 1 
909nu3dx3rgk13.com.de
Details Domain 1 
venumxmasz.club
Details Domain 1 
bantqr8rrm9c11.com.de
Details Domain 1 
vuryza.ga
Details Domain 1 
evokgtis.gq
Details Domain 1 
xufa8hy15.online
Details Domain 1 
g2ha14u2m2xe12.com.de
Details Domain 1 
xvbe.monster
Details File 409 
c:\windows\system32\cmd.exe
Details File 1 
c:\users\public\libraries\radm\koddsuffyi.gif
Details File 1 
c:\users\public\libraries\radm\desktop.ini
Details File 1 
koddsuffyi.gif
Details File 196 
desktop.ini
Details File 13 
extexport.exe
Details File 1 
64a.dll
Details File 1 
64b.dll
Details File 1122 
svchost.exe
Details File 11 
vmnat.exe
Details md5 1 
0219ef20ab2df29b9b29f8407cf74f1c
Details md5 1 
0931a26d44f0e7d70fda9ef86ee203f4
Details md5 1 
5ce1eb8065acad5b59288b5662936f5d
Details md5 1 
91b271e7bfe64566de562a8dd2145ac6
Details md5 1 
4194162fe30a3dca6d8568e72c71ed2d
Details md5 1 
aeaf7355604685d4d753d21902ff1c1c
Details md5 1 
c63b4eb3067d8cb5f2d576bc0777e87d
Details md5 1 
071d3d6404826c24188dc37872224b3d
Details md5 1 
1b50b1e375244ce5d4e690cf0dbc96d8