tinba | 6b934ed0d81fd70e35f49d3d0ebbd70ba356aca0520d2b0288ea09c2740a1bb7 | Triage

Sharing

General

Target

3e19bbb951a6c91cc6c6004cf5bcf330N.exe
Size

89KB
Sample

240910-1fep3axgle
MD5

3e19bbb951a6c91cc6c6004cf5bcf330
SHA1

c096da1e827a56f3f0a3abfb3819d2e65c35f492
SHA256

6b934ed0d81fd70e35f49d3d0ebbd70ba356aca0520d2b0288ea09c2740a1bb7
SHA512

c6a17d000e04d8537ddfef0bbb8e1b69498072e5688482d37a183ca42d97438d7b2618fd85281cfbb9000f1ed8f5a44b3d8c320c0312b5c27b3f4d8ad8a73e87
SSDEEP

1536:99o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:99o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3e19bbb951a6c91cc6c6004cf5bcf330N.exe
- Size
  
  89KB
- MD5
  
  3e19bbb951a6c91cc6c6004cf5bcf330
- SHA1
  
  c096da1e827a56f3f0a3abfb3819d2e65c35f492
- SHA256
  
  6b934ed0d81fd70e35f49d3d0ebbd70ba356aca0520d2b0288ea09c2740a1bb7
- SHA512
  
  c6a17d000e04d8537ddfef0bbb8e1b69498072e5688482d37a183ca42d97438d7b2618fd85281cfbb9000f1ed8f5a44b3d8c320c0312b5c27b3f4d8ad8a73e87
- SSDEEP
  
  1536:99o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:99o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2