tinba | fd23ae9a1a227e756e182ea48cd96fbc7c7231c8756d73fc9e32bab446d84740 | Triage

Submit
Reports

Overview

overview

Static

static

7

ae504994d8...0N.exe

windows7-x64

ae504994d8...0N.exe

windows10-2004-x64

Sharing

General

Target

ae504994d88f5ea94091d26a302274e0N
Size

110KB
Sample

240908-d7pysatfjr
MD5

ae504994d88f5ea94091d26a302274e0
SHA1

4e9575698aa38744692d2dc05e803ace85ad4b2d
SHA256

fd23ae9a1a227e756e182ea48cd96fbc7c7231c8756d73fc9e32bab446d84740
SHA512

469a591dcb8b4c4f29f176c5dfcfc125f3dcfd05ef27e9f4fce300e7f68f73b86ea7df29bce53ca617da123bb6d064ccd844beaf052241391ed8e77c15dc3b33
SSDEEP

1536:miLOvRmmQegJgBbmAQ256/ZrwWnwqjhurmKFcxL8JQ28SGd:miyvRmeLs/ZrwWJjAqGcRJ2xS

Score

10^/10

tinba banker discovery persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ae504994d88f5ea94091d26a302274e0N.exe

Resource

win7-20240903-en

tinba banker discovery persistence trojan upx

windows7-x64

7 signatures

120 seconds

Behavioral task

behavioral2

Sample

ae504994d88f5ea94091d26a302274e0N.exe

Resource

win10v2004-20240802-en

tinba banker discovery persistence trojan upx

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  ae504994d88f5ea94091d26a302274e0N
- Size
  
  110KB
- MD5
  
  ae504994d88f5ea94091d26a302274e0
- SHA1
  
  4e9575698aa38744692d2dc05e803ace85ad4b2d
- SHA256
  
  fd23ae9a1a227e756e182ea48cd96fbc7c7231c8756d73fc9e32bab446d84740
- SHA512
  
  469a591dcb8b4c4f29f176c5dfcfc125f3dcfd05ef27e9f4fce300e7f68f73b86ea7df29bce53ca617da123bb6d064ccd844beaf052241391ed8e77c15dc3b33
- SSDEEP
  
  1536:miLOvRmmQegJgBbmAQ256/ZrwWnwqjhurmKFcxL8JQ28SGd:miyvRmeLs/ZrwWJjAqGcRJ2xS
Score

10^/10

tinba banker discovery persistence trojan upx
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojanupx

behavioral2

tinbabankerdiscoverypersistencetrojanupx

© 2018-2025

Terms | Privacy