tinba | 8807d139b129d4dfa3830b3ac37f2a04277535e3dcd07aab7b68c26445d8c509 | Triage

Sharing

General

Target

84dc4025c140310aac726fbcb8b71ed0N.exe
Size

225KB
Sample

240905-nvmm1a1apa
MD5

84dc4025c140310aac726fbcb8b71ed0
SHA1

c313b4b0279174bf7e96d2faf1feb1c8e418172a
SHA256

8807d139b129d4dfa3830b3ac37f2a04277535e3dcd07aab7b68c26445d8c509
SHA512

9d107b4b60aed2e540a0c5aae69c817c1fe79941957db8e1f8b54f8097d7b56883245a97ac98821ca956889202c1689003c615ffdb12dc511c100397568134d1
SSDEEP

6144:eA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:eATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  84dc4025c140310aac726fbcb8b71ed0N.exe
- Size
  
  225KB
- MD5
  
  84dc4025c140310aac726fbcb8b71ed0
- SHA1
  
  c313b4b0279174bf7e96d2faf1feb1c8e418172a
- SHA256
  
  8807d139b129d4dfa3830b3ac37f2a04277535e3dcd07aab7b68c26445d8c509
- SHA512
  
  9d107b4b60aed2e540a0c5aae69c817c1fe79941957db8e1f8b54f8097d7b56883245a97ac98821ca956889202c1689003c615ffdb12dc511c100397568134d1
- SSDEEP
  
  6144:eA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:eATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2