tinba | 1a8a9a9a7022810294835831cb5320d22cea92ea78a7cf6f68ea972cc25ab497 | Triage

Sharing

General

Target

0538aabbafbdc672ee29999103d2e646.zip
Size

39KB
Sample

240831-mvyjtszckd
MD5

33c2fd3b2f7e4444d01f8f45beecea5d
SHA1

3c9c3160c58975b007238f246e0448aae3e9e49a
SHA256

1a8a9a9a7022810294835831cb5320d22cea92ea78a7cf6f68ea972cc25ab497
SHA512

73fb51475441eebad0e84f513956d4e3d04dbad8e32bb625f7795748c5dcecb3d596057481ca7d3ddf315b356cec17bbec6124d89c4d4c7c34e1f22f49ab6dd2
SSDEEP

768:R/JvtBj5RTzcV9a8t/dWE8pOLvF+Jb8DM+Fy25bkk1MJu70p:R/Jl5LTzcVQ8tkpCdUb8Y+FR5b/15q

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b291618cedab53022101f79dd14b6436af986d724c0515317aaabf8b29736a84
- Size
  
  88KB
- MD5
  
  0538aabbafbdc672ee29999103d2e646
- SHA1
  
  8321c4c30f3b3a2f23ef37d2a6f800b7b498b9b8
- SHA256
  
  b291618cedab53022101f79dd14b6436af986d724c0515317aaabf8b29736a84
- SHA512
  
  2838fca01446d06fb4c8ddc7c3763da5487b3328a2fe44693f65797e44d1ea328f3f88d3ef394543ef75a1c491dad91542eb71bc5a672207ab94cd98d31e235d
- SSDEEP
  
  1536:x5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsN:x5fvp12UFKcD/6jwqWsN
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan