tinba | 2bb8c08f221668c006ada1625129c7c044a67de4006910254da84ca0de9f1c7c | Triage

Sharing

General

Target

b83608d57505af4b96a42b4d3d590e00N.exe
Size

106KB
Sample

240822-3pkzjstfmd
MD5

b83608d57505af4b96a42b4d3d590e00
SHA1

42688f6da6033c2a96ef05943158dfd54807ba64
SHA256

2bb8c08f221668c006ada1625129c7c044a67de4006910254da84ca0de9f1c7c
SHA512

78f585a417bb7d333487a8516119b0c55097175d4e191e580e2e21d5fce1c3fbb3cbe1e9f615de8cbe93280073f7df25e36f64b1445106ad8b4f155323b7e7b0
SSDEEP

768:++6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:++mFM2QXtZgi9Iksu+XM57ipeq9JA

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b83608d57505af4b96a42b4d3d590e00N.exe
- Size
  
  106KB
- MD5
  
  b83608d57505af4b96a42b4d3d590e00
- SHA1
  
  42688f6da6033c2a96ef05943158dfd54807ba64
- SHA256
  
  2bb8c08f221668c006ada1625129c7c044a67de4006910254da84ca0de9f1c7c
- SHA512
  
  78f585a417bb7d333487a8516119b0c55097175d4e191e580e2e21d5fce1c3fbb3cbe1e9f615de8cbe93280073f7df25e36f64b1445106ad8b4f155323b7e7b0
- SSDEEP
  
  768:++6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:++mFM2QXtZgi9Iksu+XM57ipeq9JA
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan