tinba | aa6b2746cdd0e1c17c7b6741a9a460cee358437a52d98a5420c17387417f9184 | Triage

Sharing

General

Target

aea547b23a56650a47ce7a7501b056e0N.exe
Size

237KB
Sample

240820-2yaphaxgkg
MD5

aea547b23a56650a47ce7a7501b056e0
SHA1

b988ef6a74ccf59b0796d2dce7f91dce1cbcbb58
SHA256

aa6b2746cdd0e1c17c7b6741a9a460cee358437a52d98a5420c17387417f9184
SHA512

bd5345302d853c786348fd3692caa7486f07d2a80d45890258a1bc8be30d8abaa4dcae06f18ceb3e214477d7e86a82eb1e4381254310099a60e4fb58047b3f04
SSDEEP

6144:XA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:XATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  aea547b23a56650a47ce7a7501b056e0N.exe
- Size
  
  237KB
- MD5
  
  aea547b23a56650a47ce7a7501b056e0
- SHA1
  
  b988ef6a74ccf59b0796d2dce7f91dce1cbcbb58
- SHA256
  
  aa6b2746cdd0e1c17c7b6741a9a460cee358437a52d98a5420c17387417f9184
- SHA512
  
  bd5345302d853c786348fd3692caa7486f07d2a80d45890258a1bc8be30d8abaa4dcae06f18ceb3e214477d7e86a82eb1e4381254310099a60e4fb58047b3f04
- SSDEEP
  
  6144:XA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:XATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2