tinba | 61fd018f7ea297dac53d67fb05559ffd2357fe18a86b4962f6d09d66ec543340 | Triage

Sharing

General

Target

61fd018f7ea297dac53d67fb05559ffd2357fe18a86b4962f6d09d66ec543340_NeikiAnalytics.exe
Size

225KB
Sample

240620-pmc92a1fpq
MD5

2b7b671c06fb41d7855092ee581df4d0
SHA1

d7145a8f49f8eca5718ebcf99bc1b963802714a6
SHA256

61fd018f7ea297dac53d67fb05559ffd2357fe18a86b4962f6d09d66ec543340
SHA512

07ac08351097a20828350eff5abc4478255b4e625117ceb1c6320b38f4bdb1183604857ea87b8afd8f5da17d59feaad377627cc799365fd1bf597b88d6a6265f
SSDEEP

6144:+A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:+ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker persistence trojan

Malware Config

Targets

- Target
  
  61fd018f7ea297dac53d67fb05559ffd2357fe18a86b4962f6d09d66ec543340_NeikiAnalytics.exe
- Size
  
  225KB
- MD5
  
  2b7b671c06fb41d7855092ee581df4d0
- SHA1
  
  d7145a8f49f8eca5718ebcf99bc1b963802714a6
- SHA256
  
  61fd018f7ea297dac53d67fb05559ffd2357fe18a86b4962f6d09d66ec543340
- SHA512
  
  07ac08351097a20828350eff5abc4478255b4e625117ceb1c6320b38f4bdb1183604857ea87b8afd8f5da17d59feaad377627cc799365fd1bf597b88d6a6265f
- SSDEEP
  
  6144:+A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:+ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2