tinba | 2b44a032c10aa4318ec524592d6bb60f2853d2060474bbf2b18c915a3454ef8f | Triage™

Login
Reports

Overview

overview

Static

static

3

ba9cf73fb4...18.exe

windows7-x64

ba9cf73fb4...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

Target
ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118
Size 148KB
Sample240404-rp2fraaa91
SHA256 2b44a032c10aa4318ec524592d6bb60f2853d2060474bbf2b18c915a3454ef8f
MD5 ba9cf73fb40a8d21912e5859ca0bb1ed
SHA1 806467a7a19ed5fa8e0438b4c73f54da00de0723
SHA512 7669c8924c9eb827b09a29cd6a829a228549b723a5771efef4e6f5eaf3d44ffa1172d6fd83471d22c4402457085d583419e7e25c04824996ad7022d465bcdc85
SSDEEP 1536:pv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:I/dwh9uu39N81SbxthE8vCO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

tinba banker persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

tinba banker persistence trojan

Behavioral task

behavioral2

Sample

ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

0 signatures

150 seconds

Malware Config

Targets

- Target
  ba9cf73fb40a8d21912e5859ca0bb1ed_JaffaCakes118
- Size 148KB
- SHA256 2b44a032c10aa4318ec524592d6bb60f2853d2060474bbf2b18c915a3454ef8f
- MD5 ba9cf73fb40a8d21912e5859ca0bb1ed
- SHA1 806467a7a19ed5fa8e0438b4c73f54da00de0723
- SHA512 7669c8924c9eb827b09a29cd6a829a228549b723a5771efef4e6f5eaf3d44ffa1172d6fd83471d22c4402457085d583419e7e25c04824996ad7022d465bcdc85
- SSDEEP 1536:pv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:I/dwh9uu39N81SbxthE8vCO
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2

© 2018-2026

Terms | Privacy