tinba | a60a5b19a7b112fff00dd842bc7caf55bb52d1186b116fee80deb93e5c0a2c37 | Triage

Sharing

General

Target

727a39f25d6a72fcfa83f0da7066ab10N.exe
Size

237KB
Sample

240813-cb4avsybrg
MD5

727a39f25d6a72fcfa83f0da7066ab10
SHA1

2ba3e23edbebe51ed645be45ec1c348b92fbc7f2
SHA256

a60a5b19a7b112fff00dd842bc7caf55bb52d1186b116fee80deb93e5c0a2c37
SHA512

d7abb59480ec21b1a1eab5be17d0edec764928df0f9aabf7e848b56da841e8374813a7874b63f0922b96f5fb769f2313942656af1766dae86375137f6716c60f
SSDEEP

6144:2A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:2ATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  727a39f25d6a72fcfa83f0da7066ab10N.exe
- Size
  
  237KB
- MD5
  
  727a39f25d6a72fcfa83f0da7066ab10
- SHA1
  
  2ba3e23edbebe51ed645be45ec1c348b92fbc7f2
- SHA256
  
  a60a5b19a7b112fff00dd842bc7caf55bb52d1186b116fee80deb93e5c0a2c37
- SHA512
  
  d7abb59480ec21b1a1eab5be17d0edec764928df0f9aabf7e848b56da841e8374813a7874b63f0922b96f5fb769f2313942656af1766dae86375137f6716c60f
- SSDEEP
  
  6144:2A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:2ATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2