tinba | 271ed794cfeb4e80ce97893d4d53fe85f8c7653693f3be3e2c7264cc4effec90 | Triage

Sharing

General

Target

738425db464c99cdb4b909549679eca0N.exe
Size

225KB
Sample

240904-k8eb1axdnr
MD5

738425db464c99cdb4b909549679eca0
SHA1

2e10cbaa13f3bb43a57d38a821ea3139f0f39453
SHA256

271ed794cfeb4e80ce97893d4d53fe85f8c7653693f3be3e2c7264cc4effec90
SHA512

bef52251e9a60563ae5c3105021111d8ad74b7c97a6df0e677cee67a0e345d817353f6a2267911d1f1df70d6194126a9d986c382e931b530ceb846c0543c02c9
SSDEEP

6144:8A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:8ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  738425db464c99cdb4b909549679eca0N.exe
- Size
  
  225KB
- MD5
  
  738425db464c99cdb4b909549679eca0
- SHA1
  
  2e10cbaa13f3bb43a57d38a821ea3139f0f39453
- SHA256
  
  271ed794cfeb4e80ce97893d4d53fe85f8c7653693f3be3e2c7264cc4effec90
- SHA512
  
  bef52251e9a60563ae5c3105021111d8ad74b7c97a6df0e677cee67a0e345d817353f6a2267911d1f1df70d6194126a9d986c382e931b530ceb846c0543c02c9
- SSDEEP
  
  6144:8A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:8ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2