tinba | 1f2cd4798625f784e82fd81b3e87576d42072e3e3abd4360fd8d4d13b572d206 | Triage

Sharing

General

Target

1f2cd4798625f784e82fd81b3e87576d42072e3e3abd4360fd8d4d13b572d206.exe
Size

237KB
Sample

241122-zyktcsyqby
MD5

3a64b94466f511700e8e223c326a24fe
SHA1

ac16d4c51cf5daf2d675e42b689f338cb384172f
SHA256

1f2cd4798625f784e82fd81b3e87576d42072e3e3abd4360fd8d4d13b572d206
SHA512

fbacfdf9ee6d5a44f0a732de67b48fd8082a11751be0f9a16d2263863f5ce6b9817af3bafb96974d54afb1e14540b70a2d8b280994e94edfc86c5c8111f6f386
SSDEEP

6144:CA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:CATuTAnKGwUAWVycQqg7

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  1f2cd4798625f784e82fd81b3e87576d42072e3e3abd4360fd8d4d13b572d206.exe
- Size
  
  237KB
- MD5
  
  3a64b94466f511700e8e223c326a24fe
- SHA1
  
  ac16d4c51cf5daf2d675e42b689f338cb384172f
- SHA256
  
  1f2cd4798625f784e82fd81b3e87576d42072e3e3abd4360fd8d4d13b572d206
- SHA512
  
  fbacfdf9ee6d5a44f0a732de67b48fd8082a11751be0f9a16d2263863f5ce6b9817af3bafb96974d54afb1e14540b70a2d8b280994e94edfc86c5c8111f6f386
- SSDEEP
  
  6144:CA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:CATuTAnKGwUAWVycQqg7
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2