tinba | 78adb1f3877be81f8aab97d12e0a00b44796b9874290512d7bdf68d154123104 | Triage

Sharing

General

Target

32c1dc91baf6b1cded2c083f2df127d6bf412fe601f66e5facbf9b1ee622a398N.exe
Size

59KB
Sample

241114-h6m51svmhz
MD5

20ec96f2c9d249790ca144dd130e60a9
SHA1

51ebe60c8d0d22ba6afec37ba0ea806d88d98dca
SHA256

78adb1f3877be81f8aab97d12e0a00b44796b9874290512d7bdf68d154123104
SHA512

27f81a89aa9501edbfaeaa349b85d7f20cbca85aa81b1079d436c8a1e1ab03fe7c028471af6c0246a4c84bdfab1cc1d76caf4c1611220cccbcd7b9779916567a
SSDEEP

768:x+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9JQ:x+mFM2HXKZgiFP7xIksu+XM5O9JQ

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  32c1dc91baf6b1cded2c083f2df127d6bf412fe601f66e5facbf9b1ee622a398N.exe
- Size
  
  59KB
- MD5
  
  20ec96f2c9d249790ca144dd130e60a9
- SHA1
  
  51ebe60c8d0d22ba6afec37ba0ea806d88d98dca
- SHA256
  
  78adb1f3877be81f8aab97d12e0a00b44796b9874290512d7bdf68d154123104
- SHA512
  
  27f81a89aa9501edbfaeaa349b85d7f20cbca85aa81b1079d436c8a1e1ab03fe7c028471af6c0246a4c84bdfab1cc1d76caf4c1611220cccbcd7b9779916567a
- SSDEEP
  
  768:x+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9JQ:x+mFM2HXKZgiFP7xIksu+XM5O9JQ
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan