tinba | 63d68adc2bd59ec766c11fa5626da199d6da66e9f839fe96fff2bbb3b3b91008 | Triage

Sharing

General

Target

63d68adc2bd59ec766c11fa5626da199d6da66e9f839fe96fff2bbb3b3b91008.exe
Size

371KB
Sample

241123-pkx7es1lbn
MD5

fe790d4a2026bfee70ff38ca71330630
SHA1

e954004bc3bd6f45680a2627c25d9aee0e8f7bf7
SHA256

63d68adc2bd59ec766c11fa5626da199d6da66e9f839fe96fff2bbb3b3b91008
SHA512

3516d3334dca48b0501e60eb589124e486a96acc539017a6ab92b3d8104290f6058efa2150860974cfe554c123b93c8f0862edfea7fd88ea25c024c14434c6c4
SSDEEP

6144:mCE6/mUXJ531nIUliViSZbLhaZfvMlLXICgo:O6TOUMBQf0ljWo

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  63d68adc2bd59ec766c11fa5626da199d6da66e9f839fe96fff2bbb3b3b91008.exe
- Size
  
  371KB
- MD5
  
  fe790d4a2026bfee70ff38ca71330630
- SHA1
  
  e954004bc3bd6f45680a2627c25d9aee0e8f7bf7
- SHA256
  
  63d68adc2bd59ec766c11fa5626da199d6da66e9f839fe96fff2bbb3b3b91008
- SHA512
  
  3516d3334dca48b0501e60eb589124e486a96acc539017a6ab92b3d8104290f6058efa2150860974cfe554c123b93c8f0862edfea7fd88ea25c024c14434c6c4
- SSDEEP
  
  6144:mCE6/mUXJ531nIUliViSZbLhaZfvMlLXICgo:O6TOUMBQf0ljWo
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2