tinba | 0e355dae53a1bbcda45c294b15387f44e85fa4aa41434da8e24709047a6a3069 | Triage

Sharing

General

Target

50159868102ffa1523c93d91ca9870c0N
Size

89KB
Sample

240915-nhagxasbkl
MD5

50159868102ffa1523c93d91ca9870c0
SHA1

85b84d78058b0adabf009e89abdbc9b3701fe234
SHA256

0e355dae53a1bbcda45c294b15387f44e85fa4aa41434da8e24709047a6a3069
SHA512

e56b7cad65179a0976d2bdd86231a42f7d9bfe1a747ffebd61feeee9cb00f5c9e5e37ba80a893eb58a0f825a6187421ecd96397f6d7fb54b2c02d03a65652b73
SSDEEP

1536:49o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:49o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  50159868102ffa1523c93d91ca9870c0N
- Size
  
  89KB
- MD5
  
  50159868102ffa1523c93d91ca9870c0
- SHA1
  
  85b84d78058b0adabf009e89abdbc9b3701fe234
- SHA256
  
  0e355dae53a1bbcda45c294b15387f44e85fa4aa41434da8e24709047a6a3069
- SHA512
  
  e56b7cad65179a0976d2bdd86231a42f7d9bfe1a747ffebd61feeee9cb00f5c9e5e37ba80a893eb58a0f825a6187421ecd96397f6d7fb54b2c02d03a65652b73
- SSDEEP
  
  1536:49o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:49o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2