tinba | d8bf2b7e73ffdf282b9cbcdcc762ff615945fa90818d7815c8b34d4b59756449 | Triage

Sharing

General

Target

fce74f91a0846a362dd1599f636afee0N.exe
Size

225KB
Sample

240819-23s2ms1bpf
MD5

fce74f91a0846a362dd1599f636afee0
SHA1

8bd28c0e494247c72876873034fb149a12c5ff46
SHA256

d8bf2b7e73ffdf282b9cbcdcc762ff615945fa90818d7815c8b34d4b59756449
SHA512

7d7c5f34b52dcc1044e97dc5035d0bd83a93fe28b33d685c6eee58bb95bd4527265ec1761940e9cd5f09601cb32121c82a5d2702b71901dd040829a9af2b0337
SSDEEP

6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  fce74f91a0846a362dd1599f636afee0N.exe
- Size
  
  225KB
- MD5
  
  fce74f91a0846a362dd1599f636afee0
- SHA1
  
  8bd28c0e494247c72876873034fb149a12c5ff46
- SHA256
  
  d8bf2b7e73ffdf282b9cbcdcc762ff615945fa90818d7815c8b34d4b59756449
- SHA512
  
  7d7c5f34b52dcc1044e97dc5035d0bd83a93fe28b33d685c6eee58bb95bd4527265ec1761940e9cd5f09601cb32121c82a5d2702b71901dd040829a9af2b0337
- SSDEEP
  
  6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2