tinba | 9219804ae55252397f63937e87d475d80078d7ff8091104e55bf3565bd44cc21 | Triage

Sharing

General

Target

9219804ae55252397f63937e87d475d80078d7ff8091104e55bf3565bd44cc21.exe
Size

88KB
Sample

241124-m7vzgawqfs
MD5

5e126bff8950a9714f5805174c1fe016
SHA1

35d964585212134333b385c1173bcba51838481c
SHA256

9219804ae55252397f63937e87d475d80078d7ff8091104e55bf3565bd44cc21
SHA512

c7fca75cbc1cb173d84b2b361e48afe95170114804dfd10e4d49a6c1e454cf34c32fd005a01724aa1cf581264d1a258b58b42f90827c318a97e35b3ebe1dc1c1
SSDEEP

1536:U5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:U5fvp12UFKcD/6jwqWsNI

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9219804ae55252397f63937e87d475d80078d7ff8091104e55bf3565bd44cc21.exe
- Size
  
  88KB
- MD5
  
  5e126bff8950a9714f5805174c1fe016
- SHA1
  
  35d964585212134333b385c1173bcba51838481c
- SHA256
  
  9219804ae55252397f63937e87d475d80078d7ff8091104e55bf3565bd44cc21
- SHA512
  
  c7fca75cbc1cb173d84b2b361e48afe95170114804dfd10e4d49a6c1e454cf34c32fd005a01724aa1cf581264d1a258b58b42f90827c318a97e35b3ebe1dc1c1
- SSDEEP
  
  1536:U5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:U5fvp12UFKcD/6jwqWsNI
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan