tinba | 761f7d0982840f0cfecc3100c9d367aebd4871792c4f3d38ca569f7486ba4448 | Triage

Sharing

General

Target

e33c3707463d2ebddd209ac621160ee0N.exe
Size

237KB
Sample

240819-2tjrlszfph
MD5

e33c3707463d2ebddd209ac621160ee0
SHA1

84682d9412548f10094ca069e4ea8521d83b7964
SHA256

761f7d0982840f0cfecc3100c9d367aebd4871792c4f3d38ca569f7486ba4448
SHA512

64eae1affe142315167ce5b07630d7be56f253d368d624490eeee2a5c149d2fe6cade529b4f108a9e67e66b7cc130ecaa13fee80498032c26c2ecb1e4d165e2b
SSDEEP

6144:zA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:zATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e33c3707463d2ebddd209ac621160ee0N.exe
- Size
  
  237KB
- MD5
  
  e33c3707463d2ebddd209ac621160ee0
- SHA1
  
  84682d9412548f10094ca069e4ea8521d83b7964
- SHA256
  
  761f7d0982840f0cfecc3100c9d367aebd4871792c4f3d38ca569f7486ba4448
- SHA512
  
  64eae1affe142315167ce5b07630d7be56f253d368d624490eeee2a5c149d2fe6cade529b4f108a9e67e66b7cc130ecaa13fee80498032c26c2ecb1e4d165e2b
- SSDEEP
  
  6144:zA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:zATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2