tinba | 9e8aa9f76a2667c1500da920ded6b5301f69a15c140f5fc9141956c28fa3c361 | Triage

Sharing

General

Target

9e8aa9f76a2667c1500da920ded6b5301f69a15c140f5fc9141956c28fa3c361.exe
Size

225KB
Sample

241125-wqwn4syrhy
MD5

1a62ecbb247d859e56c77fcc00e3db97
SHA1

9ba6c7c42148e80cb21b49166a12ba15098234b4
SHA256

9e8aa9f76a2667c1500da920ded6b5301f69a15c140f5fc9141956c28fa3c361
SHA512

e358d89eaf732c0b7a1d24736ff7352348f87a2e5de126b60b205948c04d884dee88fb9fbcdf49fa79588250bef79d4281f91f60c1faf02b9ac3b33a419415fc
SSDEEP

6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:vATuTAnKGwUAW3ycQqgF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9e8aa9f76a2667c1500da920ded6b5301f69a15c140f5fc9141956c28fa3c361.exe
- Size
  
  225KB
- MD5
  
  1a62ecbb247d859e56c77fcc00e3db97
- SHA1
  
  9ba6c7c42148e80cb21b49166a12ba15098234b4
- SHA256
  
  9e8aa9f76a2667c1500da920ded6b5301f69a15c140f5fc9141956c28fa3c361
- SHA512
  
  e358d89eaf732c0b7a1d24736ff7352348f87a2e5de126b60b205948c04d884dee88fb9fbcdf49fa79588250bef79d4281f91f60c1faf02b9ac3b33a419415fc
- SSDEEP
  
  6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:vATuTAnKGwUAW3ycQqgF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2