tinba | b8dbc4a85d873a9afc758ede0610aa5baa3b897b8a6dbe244b8e973a79c17283 | Triage

Sharing

General

Target

b8dbc4a85d873a9afc758ede0610aa5baa3b897b8a6dbe244b8e973a79c17283N.exe
Size

225KB
Sample

240925-p6w69azcqg
MD5

8deb1870aebe706c0b07188a8ae96760
SHA1

57169ef9301f2782b3b9aa03679f1cc73595c089
SHA256

b8dbc4a85d873a9afc758ede0610aa5baa3b897b8a6dbe244b8e973a79c17283
SHA512

7a324da0421c73925df85dc245e2e80ead0aa007380f38405cd05b9138152445293c482a345e26348d9e11b31250c25e5dee2a67b8b545b4dd4d56842e5a86fe
SSDEEP

6144:RA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:RATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b8dbc4a85d873a9afc758ede0610aa5baa3b897b8a6dbe244b8e973a79c17283N.exe
- Size
  
  225KB
- MD5
  
  8deb1870aebe706c0b07188a8ae96760
- SHA1
  
  57169ef9301f2782b3b9aa03679f1cc73595c089
- SHA256
  
  b8dbc4a85d873a9afc758ede0610aa5baa3b897b8a6dbe244b8e973a79c17283
- SHA512
  
  7a324da0421c73925df85dc245e2e80ead0aa007380f38405cd05b9138152445293c482a345e26348d9e11b31250c25e5dee2a67b8b545b4dd4d56842e5a86fe
- SSDEEP
  
  6144:RA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:RATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2