tinba | 2577623fc861d8fa2525300245bea8ed33673d2c8f85d064a4475ec066897427 | Triage

Sharing

General

Target

2577623fc861d8fa2525300245bea8ed33673d2c8f85d064a4475ec066897427N.exe
Size

610KB
Sample

241119-v3lh8szbnn
MD5

7856aade8a2af78328cd1eed3a6c8cd0
SHA1

5b8385255352e3eae7db16ab9fe09700a135c4b3
SHA256

2577623fc861d8fa2525300245bea8ed33673d2c8f85d064a4475ec066897427
SHA512

b0092b9f2a22f1250875f5ba4a688b8c5185417fc46a5fb831abfb7713ac5e2a53962362a1d328b2b76f378179043b5d80e05fa0cc49be2ab29db72100b74588
SSDEEP

12288:wATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:+T+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  2577623fc861d8fa2525300245bea8ed33673d2c8f85d064a4475ec066897427N.exe
- Size
  
  610KB
- MD5
  
  7856aade8a2af78328cd1eed3a6c8cd0
- SHA1
  
  5b8385255352e3eae7db16ab9fe09700a135c4b3
- SHA256
  
  2577623fc861d8fa2525300245bea8ed33673d2c8f85d064a4475ec066897427
- SHA512
  
  b0092b9f2a22f1250875f5ba4a688b8c5185417fc46a5fb831abfb7713ac5e2a53962362a1d328b2b76f378179043b5d80e05fa0cc49be2ab29db72100b74588
- SSDEEP
  
  12288:wATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:+T+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2