tinba | 2e4f9acacd6e23456d64d90287d758a935ac717567391a9d35bd1029c0758b2d | Triage

Sharing

General

Target

13e1a37a9b2a47f0876932d5461e4250N.exe
Size

89KB
Sample

240816-pkw95athmf
MD5

13e1a37a9b2a47f0876932d5461e4250
SHA1

c3bb0306d23265d5daded4b0cf3203cfe3937d05
SHA256

2e4f9acacd6e23456d64d90287d758a935ac717567391a9d35bd1029c0758b2d
SHA512

88662df3ebae051314ff9546ee2fdcd1468e484db51364a43c111ceeef1f02132995bfe16bcc49a7c83acac38092d7dac46f73a9c07f5bef5553b06be868e836
SSDEEP

1536:W9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:W9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  13e1a37a9b2a47f0876932d5461e4250N.exe
- Size
  
  89KB
- MD5
  
  13e1a37a9b2a47f0876932d5461e4250
- SHA1
  
  c3bb0306d23265d5daded4b0cf3203cfe3937d05
- SHA256
  
  2e4f9acacd6e23456d64d90287d758a935ac717567391a9d35bd1029c0758b2d
- SHA512
  
  88662df3ebae051314ff9546ee2fdcd1468e484db51364a43c111ceeef1f02132995bfe16bcc49a7c83acac38092d7dac46f73a9c07f5bef5553b06be868e836
- SSDEEP
  
  1536:W9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:W9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2