tinba | 96aec67b370328fd802d7f20cf7caa2f8c9ecfa3e983b67d4a80c55114f731b8 | Triage

Sharing

General

Target

8e64a7c801e22ceca70dfe6cc81f0bf0N
Size

89KB
Sample

240910-ewdl2sxhmd
MD5

8e64a7c801e22ceca70dfe6cc81f0bf0
SHA1

0dad4d506d0bb056a0a593fb58354ffa81e64f3b
SHA256

96aec67b370328fd802d7f20cf7caa2f8c9ecfa3e983b67d4a80c55114f731b8
SHA512

2bbc6835380384781de3ed65e76fc66da6e391c221e854467e7a6f35f8b68009c3895f1c738c00ad4c3e7bd8b43a1e7d6c94450f17bc9f1510ff75b9bb35ea75
SSDEEP

1536:o9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:o9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  8e64a7c801e22ceca70dfe6cc81f0bf0N
- Size
  
  89KB
- MD5
  
  8e64a7c801e22ceca70dfe6cc81f0bf0
- SHA1
  
  0dad4d506d0bb056a0a593fb58354ffa81e64f3b
- SHA256
  
  96aec67b370328fd802d7f20cf7caa2f8c9ecfa3e983b67d4a80c55114f731b8
- SHA512
  
  2bbc6835380384781de3ed65e76fc66da6e391c221e854467e7a6f35f8b68009c3895f1c738c00ad4c3e7bd8b43a1e7d6c94450f17bc9f1510ff75b9bb35ea75
- SSDEEP
  
  1536:o9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:o9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2