tinba | 77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b | Triage

Submit
Reports

Overview

overview

Static

static

5

77073236e4...3b.exe

windows7-x64

77073236e4...3b.exe

windows10-2004-x64

Sharing

General

Target

77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b
Size

45KB
Sample

241117-hbzkkaxqcr
MD5

854cf72bde3f7d8ebfa7c7c201a77bde
SHA1

95f55fb687c3e5169cb39667dde5c161ee6cbe25
SHA256

77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b
SHA512

5bec7da5a2d0533d69a6d3a2526a4cdf5023b7a3e0a6d52a35c605bf9500b95913fb5f8ae0cb6e4f283962c3ab08c99d754e83544e70f874865b6e669d642f63
SSDEEP

768:5hP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:jsWE9N5dFu53dsniQaB/xZ14n7zIF+qr

Score

10^/10

tinba banker discovery persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b.exe

Resource

win7-20240903-en

tinba banker discovery persistence trojan upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b.exe

Resource

win10v2004-20241007-en

tinba banker discovery persistence trojan upx

windows10-2004-x64

12 signatures

150 seconds

Malware Config

Targets

- Target
  
  77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b
- Size
  
  45KB
- MD5
  
  854cf72bde3f7d8ebfa7c7c201a77bde
- SHA1
  
  95f55fb687c3e5169cb39667dde5c161ee6cbe25
- SHA256
  
  77073236e4b49efbbce3a614baee92cf3dd924ce043a2b12c94256c0b34fee3b
- SHA512
  
  5bec7da5a2d0533d69a6d3a2526a4cdf5023b7a3e0a6d52a35c605bf9500b95913fb5f8ae0cb6e4f283962c3ab08c99d754e83544e70f874865b6e669d642f63
- SSDEEP
  
  768:5hP0kDE9N5dCA8J7VHXdrIniQaBTT+QQ+r1n4K8+C9TtIuCjaqUODvJVQ2f:jsWE9N5dFu53dsniQaB/xZ14n7zIF+qr
Score

10^/10

tinba banker discovery persistence trojan upx
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojanupx

behavioral2

tinbabankerdiscoverypersistencetrojanupx

© 2018-2024

Terms | Privacy