Trojan-Banker.Win32.Banbra.atfl

By Sumo3000 in Trojans

Threat Scorecard

Threat Level:	80 % (High)
Infected Computers:	206

First Seen:	September 6, 2012
Last Seen:	April 30, 2020
OS(es) Affected:	Windows

Trojan-Banker.Win32.Banbra.atfl is a banker Trojan that is signed with a valid digital certificate issued by a CA. It appears like a fake company data was used to get the certificate. Vybercrooks buy valid digital certificates from CAs using fake data and then start signing Trojan-Banker.Win32.Banbra.atfl with them. Valid or stolen digital certificates are used by cybercrooks to create files that can go undetected and be found as genuine. Trojan-Banker.Win32.Banbra.atfl is created to harvest a victim's confidential information such as online banking

details and passwords. Once collected, the stolen data is sent to remote cybercriminals.

Table of Contents

SpyHunter Detects & Remove Trojan-Banker.Win32.Banbra.atfl

File System Details

Trojan-Banker.Win32.Banbra.atfl may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	upd.exe	b4ed234d07993acb2230240b880a67b3	55
Name: upd.exe MD5: b4ed234d07993acb2230240b880a67b3 Size: 316.99 KB (316995 bytes) Detections: 55 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
2.	upd.exe	228118c6e84c9740b8dc16c4562ae563	32
Name: upd.exe MD5: 228118c6e84c9740b8dc16c4562ae563 Size: 317.32 KB (317325 bytes) Detections: 32 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
3.	upd.exe	f3b2f2d4a56209ef5cd6154147878487	29
Name: upd.exe MD5: f3b2f2d4a56209ef5cd6154147878487 Size: 243.2 KB (243200 bytes) Detections: 29 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: April 30, 2020
4.	upd.exe	6c4a94fcc6d8d07879a54ba2fa51187d	25
Name: upd.exe MD5: 6c4a94fcc6d8d07879a54ba2fa51187d Size: 320.36 KB (320369 bytes) Detections: 25 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
5.	upd.exe	96d4fbfcda7c47e38c2918cf78f1b6a4	9
Name: upd.exe MD5: 96d4fbfcda7c47e38c2918cf78f1b6a4 Size: 304.59 KB (304595 bytes) Detections: 9 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
6.	processexplorerpe.exe	7efc0144a0220b47450473be5854d19c	8
Name: processexplorerpe.exe MD5: 7efc0144a0220b47450473be5854d19c Size: 10.7 MB (10709504 bytes) Detections: 8 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: March 25, 2017
7.	processexplorerpe.exe	55c0548290a5dc43bc54a6a15ccd42fd	5
Name: processexplorerpe.exe MD5: 55c0548290a5dc43bc54a6a15ccd42fd Size: 9.43 MB (9434624 bytes) Detections: 5 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: March 25, 2017
8.	processexplorerpe.exe	8422eb501e6d707ade71aebdcde39c7a	3
Name: processexplorerpe.exe MD5: 8422eb501e6d707ade71aebdcde39c7a Size: 7.96 MB (7965696 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA% Group: Malware file Last Updated: March 25, 2017
9.	upload.exe	006fc25a884f03b5f699836723c5a273	3
Name: upload.exe MD5: 006fc25a884f03b5f699836723c5a273 Size: 2.7 MB (2709805 bytes) Detections: 3 Type: Executable File Path: C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Group: Malware file Last Updated: April 23, 2018
10.	upd.exe	1b0f810c56ecb58f962e2a38bc1124be	2
Name: upd.exe MD5: 1b0f810c56ecb58f962e2a38bc1124be Size: 752.83 KB (752836 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
11.	upd.exe	7025680901bd7b0eeceb8b021d316cd5	2
Name: upd.exe MD5: 7025680901bd7b0eeceb8b021d316cd5 Size: 314.28 KB (314287 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
12.	upd.exe	0e0cfbdf4b2f00253e1c8960028e388d	2
Name: upd.exe MD5: 0e0cfbdf4b2f00253e1c8960028e388d Size: 317.26 KB (317269 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
13.	upd.exe	0d47d2a7a894e6d92bad09cdfdbc376e	2
Name: upd.exe MD5: 0d47d2a7a894e6d92bad09cdfdbc376e Size: 340.94 KB (340947 bytes) Detections: 2 Type: Executable File Path: %WINDIR% Group: Malware file Last Updated: March 18, 2017
14.	file.exe	11ba5cbef5f2ad873b8f67f8d7dea30f	0
Name: file.exe MD5: 11ba5cbef5f2ad873b8f67f8d7dea30f Size: 16.47 MB (16472624 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: September 7, 2012
15.	file.exe	e40bba94c1b9617c784887b62d6ac3ac	0
Name: file.exe MD5: e40bba94c1b9617c784887b62d6ac3ac Size: 756.73 KB (756736 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: August 10, 2017
16.	file.exe	e15fd888602927f4d0508bdca2e404a9	0
Name: file.exe MD5: e15fd888602927f4d0508bdca2e404a9 Size: 809.47 KB (809472 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: September 29, 2017

Registry Details

Trojan-Banker.Win32.Banbra.atfl may create the following registry entry or registry entries:

Regexp file mask

%APPDATA%\explinance.exe

%APPDATA%\rppxml.exe

%HOMEDRIVE%\10a0699fa37928d39c\spfirewall.exe

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Trojan-Banker.Win32.Banbra.atfl

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Trojan-Banker.Win32.Banbra.atfl

File System Details

Registry Details

Submit Comment

Trending

Rzfu Ransomware

'YouPorn' Email Scam

Rzkd Ransomware

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen