tinba | 2909051344dd80a33dfd47d1cf60372ba535aa3745ed0df8434681a3e715f32d | Triage™

Login
Reports

Overview

overview

Static

static

3

eff8f73d4e...18.exe

windows7-x64

eff8f73d4e...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target
eff8f73d4e5ffbfd8cb4a8f509e7b5e8_JaffaCakes118
Size 135KB
Sample240415-bsbfqsah58
SHA256 2909051344dd80a33dfd47d1cf60372ba535aa3745ed0df8434681a3e715f32d
MD5 eff8f73d4e5ffbfd8cb4a8f509e7b5e8
SHA1 bedbda380d25eaa952738340b3d3c3a6b9cc03f2
SHA512 e6e236f195ed860f35bb2ec0fb830744f1f14b4ee00b7f14ae120fc083d3b9461532178e14c0aed38c1070b2326387018e7283d14f64f17d11ac0aef6afa0fb8
SSDEEP 3072:8ir6VutmzgApobYr1fpCjeAaacVoh3EYvp3zoodIy:8E6sEgAmYhfpCCAjNBXd7
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

tinba banker persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

eff8f73d4e5ffbfd8cb4a8f509e7b5e8_JaffaCakes118.exe

Resource

win7-20240221-en

windows7-x64

6 signatures

150 seconds

tinba banker persistence trojan

Behavioral task

behavioral2

Sample

eff8f73d4e5ffbfd8cb4a8f509e7b5e8_JaffaCakes118.exe

Resource

win10v2004-20240412-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  eff8f73d4e5ffbfd8cb4a8f509e7b5e8_JaffaCakes118
- Size 135KB
- SHA256 2909051344dd80a33dfd47d1cf60372ba535aa3745ed0df8434681a3e715f32d
- MD5 eff8f73d4e5ffbfd8cb4a8f509e7b5e8
- SHA1 bedbda380d25eaa952738340b3d3c3a6b9cc03f2
- SHA512 e6e236f195ed860f35bb2ec0fb830744f1f14b4ee00b7f14ae120fc083d3b9461532178e14c0aed38c1070b2326387018e7283d14f64f17d11ac0aef6afa0fb8
- SSDEEP 3072:8ir6VutmzgApobYr1fpCjeAaacVoh3EYvp3zoodIy:8E6sEgAmYhfpCCAjNBXd7
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2

© 2018-2026

Terms | Privacy