tinba | 8c425732f627202125db9c6e90c773a44a1e1ee3ade1125977d114efb54f0bfe | Triage

Sharing

General

Target

8c425732f627202125db9c6e90c773a44a1e1ee3ade1125977d114efb54f0bfeN
Size

589KB
Sample

240918-a1m9tstfjj
MD5

60788c68d0188f42180e70c09bd64330
SHA1

33747498dd30f4d02d00c034add0ebc0dca54ee1
SHA256

8c425732f627202125db9c6e90c773a44a1e1ee3ade1125977d114efb54f0bfe
SHA512

e4e06bc6ed09f4934da46ed2ac15cc358afec1dabb625d56802805e6a78cc58e563969d91d2429108196907b4ef4a33174ac268ad7bd59f0f0a86cc502360a0f
SSDEEP

6144:5CE6/mUXJ531nIUliViSZbLhaZfvMlLXICg2vj7OyzWxzRazUE1K52u8iqUNr63:T6TOUMBQf0ljW2vj7OyzoRaA+ei

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  8c425732f627202125db9c6e90c773a44a1e1ee3ade1125977d114efb54f0bfeN
- Size
  
  589KB
- MD5
  
  60788c68d0188f42180e70c09bd64330
- SHA1
  
  33747498dd30f4d02d00c034add0ebc0dca54ee1
- SHA256
  
  8c425732f627202125db9c6e90c773a44a1e1ee3ade1125977d114efb54f0bfe
- SHA512
  
  e4e06bc6ed09f4934da46ed2ac15cc358afec1dabb625d56802805e6a78cc58e563969d91d2429108196907b4ef4a33174ac268ad7bd59f0f0a86cc502360a0f
- SSDEEP
  
  6144:5CE6/mUXJ531nIUliViSZbLhaZfvMlLXICg2vj7OyzWxzRazUE1K52u8iqUNr63:T6TOUMBQf0ljW2vj7OyzoRaA+ei
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2