tinba | 446019f8ec1112c63004a426d44a26816a3a1eeea94761e79dc16cc8c622f655 | Triage

Sharing

General

Target

446019f8ec1112c63004a426d44a26816a3a1eeea94761e79dc16cc8c622f655N
Size

225KB
Sample

241005-aadmpstdmn
MD5

5d74b4d766fb3ae3a544929be2d93850
SHA1

6e02c7de81664c90b76a68ca3baaaaeaaed74a59
SHA256

446019f8ec1112c63004a426d44a26816a3a1eeea94761e79dc16cc8c622f655
SHA512

9815b19791e5beec65bc684568dcb7c661424c56dbd7ba8640d5ff09f0488f30580f3706456b43b7a871394d7ababb190828f79741daf119e6f3bb930c95880d
SSDEEP

6144:3A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:3ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  446019f8ec1112c63004a426d44a26816a3a1eeea94761e79dc16cc8c622f655N
- Size
  
  225KB
- MD5
  
  5d74b4d766fb3ae3a544929be2d93850
- SHA1
  
  6e02c7de81664c90b76a68ca3baaaaeaaed74a59
- SHA256
  
  446019f8ec1112c63004a426d44a26816a3a1eeea94761e79dc16cc8c622f655
- SHA512
  
  9815b19791e5beec65bc684568dcb7c661424c56dbd7ba8640d5ff09f0488f30580f3706456b43b7a871394d7ababb190828f79741daf119e6f3bb930c95880d
- SSDEEP
  
  6144:3A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:3ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2