tinba | 9c90687336e5858a73c3dc1dcb45fb8ee6a1f55f9597b98e9474301c32cba95f | Triage

Sharing

General

Target

6e9cc73d6ccecb1cf6a11df07c47ebb0N.exe
Size

76KB
Sample

240827-sc4wsaxhnr
MD5

6e9cc73d6ccecb1cf6a11df07c47ebb0
SHA1

eb95076b1370df1df9c84df172f9b318291f13f6
SHA256

9c90687336e5858a73c3dc1dcb45fb8ee6a1f55f9597b98e9474301c32cba95f
SHA512

36de1c89e34621f364a4167a34cfaea5942d5826b0ddf83784c0ef579035b9a68557651ac8ed739ad2b35a54b70c6ef6ea13b8ccd5ccfa84d10823bfd6b34541
SSDEEP

768:2HAl7xH0U2VFb8OaYS0a6L+nznGOevsCWg9nrC3Xybi9HW+C5c9JT:Jl7ln2HLPL+znGOe0CWgleHosHGm9JT

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6e9cc73d6ccecb1cf6a11df07c47ebb0N.exe
- Size
  
  76KB
- MD5
  
  6e9cc73d6ccecb1cf6a11df07c47ebb0
- SHA1
  
  eb95076b1370df1df9c84df172f9b318291f13f6
- SHA256
  
  9c90687336e5858a73c3dc1dcb45fb8ee6a1f55f9597b98e9474301c32cba95f
- SHA512
  
  36de1c89e34621f364a4167a34cfaea5942d5826b0ddf83784c0ef579035b9a68557651ac8ed739ad2b35a54b70c6ef6ea13b8ccd5ccfa84d10823bfd6b34541
- SSDEEP
  
  768:2HAl7xH0U2VFb8OaYS0a6L+nznGOevsCWg9nrC3Xybi9HW+C5c9JT:Jl7ln2HLPL+znGOe0CWgleHosHGm9JT
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan