tinba | 524eb3ed18d180310153012732478eee54991b2b3c69ff680375f304ab373506 | Triage

Sharing

General

Target

95f75b8a488a2ed943c86986af576d20_NeikiAnalytics.exe
Size

225KB
Sample

240601-k8ac2sgd4v
MD5

95f75b8a488a2ed943c86986af576d20
SHA1

cf713c2655ba117b3955581bb56daa208593600e
SHA256

524eb3ed18d180310153012732478eee54991b2b3c69ff680375f304ab373506
SHA512

35b28512f00957494093e751183fc1efb6b2ae25bde5041286259b805e12afe90c84e688b772d015ed41996cf44efd70f10230a00fd4f007f755d7f136efd50f
SSDEEP

6144:kA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:kATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker persistence trojan

Malware Config

Targets

- Target
  
  95f75b8a488a2ed943c86986af576d20_NeikiAnalytics.exe
- Size
  
  225KB
- MD5
  
  95f75b8a488a2ed943c86986af576d20
- SHA1
  
  cf713c2655ba117b3955581bb56daa208593600e
- SHA256
  
  524eb3ed18d180310153012732478eee54991b2b3c69ff680375f304ab373506
- SHA512
  
  35b28512f00957494093e751183fc1efb6b2ae25bde5041286259b805e12afe90c84e688b772d015ed41996cf44efd70f10230a00fd4f007f755d7f136efd50f
- SSDEEP
  
  6144:kA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:kATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2