tinba | 1eb611bc34e8ec8274888b77f7eff636cd388143d747e1a9d9f93ed9257745a1 | Triage

Sharing

General

Target

ed3a2efa153c6562ee08d2b8359958f0N.exe
Size

106KB
Sample

240823-dmvzasvbqq
MD5

ed3a2efa153c6562ee08d2b8359958f0
SHA1

1a14de6325188c2c5554aca9ba2b90e862f6da25
SHA256

1eb611bc34e8ec8274888b77f7eff636cd388143d747e1a9d9f93ed9257745a1
SHA512

733e3c7f3bbc72dc73f9f6338e6cb23634a0974f95bea703fa4a3a9e98d0c27e978483fd0e3f05947692d1956aa707a91cec7ae4cf84aa1c04870395185c2c3e
SSDEEP

768:w+6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:w+mFM2QXtZgi9Iksu+XM57ipeq9JA

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ed3a2efa153c6562ee08d2b8359958f0N.exe
- Size
  
  106KB
- MD5
  
  ed3a2efa153c6562ee08d2b8359958f0
- SHA1
  
  1a14de6325188c2c5554aca9ba2b90e862f6da25
- SHA256
  
  1eb611bc34e8ec8274888b77f7eff636cd388143d747e1a9d9f93ed9257745a1
- SHA512
  
  733e3c7f3bbc72dc73f9f6338e6cb23634a0974f95bea703fa4a3a9e98d0c27e978483fd0e3f05947692d1956aa707a91cec7ae4cf84aa1c04870395185c2c3e
- SSDEEP
  
  768:w+6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:w+mFM2QXtZgi9Iksu+XM57ipeq9JA
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan