Trusted Design

Meet GreenDispenser: A New Breed of ATM Malware

概要

On the heels of recent disclosures of ATM malware such as Suceful [1], Plotus [2] and Padpin [3] (aka Tyupkin), Proofpoint research has discovered yet another variant of ATM malware, which we have dubbed GreenDispenser. GreenDispenser provides an attacker the ability to walk up to an infected ATM and drain its cash vault. When installed, GreenDispenser may display an ‘out of service’ message on the ATM -- but attackers who enter the correct pin codes can then drain the ATM’s cash vault and erase GreenDispenser using a deep delete process, leaving little if any trace of how the ATM was robbed.

Created: 2026-02-23

Indicators

• FileHash-SHA256 - 77850f738ba42fd9da299b2282314709ad8dc93623b318b116bfc25c5280c541 -
• FileHash-SHA256 - 50db1f5e9692f217f356a592e413e6c9cb31105a94efc70a5ca1c2c73d95d572 -
• FileHash-SHA256 - 7544e7a798b791cb36caaa1860974f33d30bc4659ceab3063d1ab4fd71c8c7e0 -
• Mutex - dispenserprgm -
• FileHash-SHA256 - b7e61f65e147885ec1fe6a787b62d9ee82d1f34f1c9ba8068d3570adca87c54f -
• FileHash-SHA256 - 20a1490b666f8c75c47b682cf10a48b7b0278068cb260b14d8d0584ee6c006a5 -

類似Pulses

• SUCEFUL: Next Generation ATM Malware (score: 0.71)
• Alice: A Lightweight, Compact, No-Nonsense ATM Malware (score: 0.64)
• Skimer: New, Improved Variant Targeting ATMs (score: 0.57)
• Backdoor:Win32/Redsip (score: 0.55)
• TrojanSpy:MSIL/Siplog (score: 0.55)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る