tinba | 9284df2cf961148490143d3f943fe725bc8fb0cb16f82beff2fe953fa83f1763 | Triage

Sharing

General

Target

9284df2cf961148490143d3f943fe725bc8fb0cb16f82beff2fe953fa83f1763.exe
Size

88KB
Sample

241123-w6wn2szpbx
MD5

513a448840be17be50f15bf614ce7873
SHA1

a77f4bb879af945ff8098d0ea1a5b008f7b04d92
SHA256

9284df2cf961148490143d3f943fe725bc8fb0cb16f82beff2fe953fa83f1763
SHA512

0d93576daa4f5564956b5ba7f99392372e6a2b39309851486b5bf5673b6664ccae18e0edc77aa6801d20f1488d2fabb2ab764f8272b5e12c93d3ba100038752c
SSDEEP

1536:Q5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:Q5fvp12UFKcD/6jwqWsNI

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9284df2cf961148490143d3f943fe725bc8fb0cb16f82beff2fe953fa83f1763.exe
- Size
  
  88KB
- MD5
  
  513a448840be17be50f15bf614ce7873
- SHA1
  
  a77f4bb879af945ff8098d0ea1a5b008f7b04d92
- SHA256
  
  9284df2cf961148490143d3f943fe725bc8fb0cb16f82beff2fe953fa83f1763
- SHA512
  
  0d93576daa4f5564956b5ba7f99392372e6a2b39309851486b5bf5673b6664ccae18e0edc77aa6801d20f1488d2fabb2ab764f8272b5e12c93d3ba100038752c
- SSDEEP
  
  1536:Q5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:Q5fvp12UFKcD/6jwqWsNI
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan