tinba | 168a86b4799be32098e76a58885f89c6fbc36ca029276d53d69da6695d192423 | Triage

Submit
Reports

Overview

overview

Static

static

7

93b186bf44...0N.exe

windows7-x64

93b186bf44...0N.exe

windows10-2004-x64

Sharing

General

Target

93b186bf44d0994f2b96a447a5bf81a0N
Size

45KB
Sample

240910-ga4mfszgmh
MD5

93b186bf44d0994f2b96a447a5bf81a0
SHA1

322e7366b7013a64dc6d47598cd1f55975cf7283
SHA256

168a86b4799be32098e76a58885f89c6fbc36ca029276d53d69da6695d192423
SHA512

0dfba3d00175d610c6ec3a8ea7d658201e47096c439b33896bd4c78326f2f8f454bfe3045661e0b6060ba3b0b3ee7bcd174d23435d3ad3181e9715d3c2b3cef4
SSDEEP

768:ChP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:usWE9N5dFu53dsniQaB/xZ14n7zIF+qr

Score

10^/10

tinba banker discovery persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

93b186bf44d0994f2b96a447a5bf81a0N.exe

Resource

win7-20240708-en

tinba banker discovery persistence trojan upx

windows7-x64

8 signatures

120 seconds

Behavioral task

behavioral2

Sample

93b186bf44d0994f2b96a447a5bf81a0N.exe

Resource

win10v2004-20240802-en

tinba banker discovery persistence trojan upx

windows10-2004-x64

11 signatures

120 seconds

Malware Config

Targets

- Target
  
  93b186bf44d0994f2b96a447a5bf81a0N
- Size
  
  45KB
- MD5
  
  93b186bf44d0994f2b96a447a5bf81a0
- SHA1
  
  322e7366b7013a64dc6d47598cd1f55975cf7283
- SHA256
  
  168a86b4799be32098e76a58885f89c6fbc36ca029276d53d69da6695d192423
- SHA512
  
  0dfba3d00175d610c6ec3a8ea7d658201e47096c439b33896bd4c78326f2f8f454bfe3045661e0b6060ba3b0b3ee7bcd174d23435d3ad3181e9715d3c2b3cef4
- SSDEEP
  
  768:ChP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:usWE9N5dFu53dsniQaB/xZ14n7zIF+qr
Score

10^/10

tinba banker discovery persistence trojan upx
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojanupx

behavioral2

tinbabankerdiscoverypersistencetrojanupx

© 2018-2025

Terms | Privacy