tinba | b30dbd2484304df0b5c94d7c634b706aa1944bcd16e8d5a82bc16c174ab43c32 | Triage

Sharing

General

Target

6ed5b133b63ed30854248d26f97323b0N.exe
Size

89KB
Sample

240914-sflvdazdlq
MD5

6ed5b133b63ed30854248d26f97323b0
SHA1

ae84083eb5108a498c75cf0779ab95ba0ec61843
SHA256

b30dbd2484304df0b5c94d7c634b706aa1944bcd16e8d5a82bc16c174ab43c32
SHA512

b4a6fb57aaeadc6132ae173654f51606dd850d4bdf86b2c150483976fcf0dc48b165372a6f12ea7f1f776484ac572d4eabce7cd73046ce5e1119d3807ae144c7
SSDEEP

1536:j9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:j9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6ed5b133b63ed30854248d26f97323b0N.exe
- Size
  
  89KB
- MD5
  
  6ed5b133b63ed30854248d26f97323b0
- SHA1
  
  ae84083eb5108a498c75cf0779ab95ba0ec61843
- SHA256
  
  b30dbd2484304df0b5c94d7c634b706aa1944bcd16e8d5a82bc16c174ab43c32
- SHA512
  
  b4a6fb57aaeadc6132ae173654f51606dd850d4bdf86b2c150483976fcf0dc48b165372a6f12ea7f1f776484ac572d4eabce7cd73046ce5e1119d3807ae144c7
- SSDEEP
  
  1536:j9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:j9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2