tinba | b425af207da5a89232b86566a798a241201a13508adeb0a57124f331c657b452 | Triage

Sharing

General

Target

b425af207da5a89232b86566a798a241201a13508adeb0a57124f331c657b452N.exe
Size

88KB
Sample

241127-fpr2jaylcw
MD5

9521c013f02760226426f1066f49c3f0
SHA1

121ed7d42f0c1e5733fc05b26a2a5e676cad614f
SHA256

b425af207da5a89232b86566a798a241201a13508adeb0a57124f331c657b452
SHA512

4d521c6e6739a91780b820c6304b6e4f4d3aa46056a15a0c31f25e892331c53e148d7f28ceb907328b3b19966d27c1d8aa11f334a8f1aaf097c02d289d9b2c9c
SSDEEP

1536:ez44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsNj:ezvokZR/KM/ysjwqWsNj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b425af207da5a89232b86566a798a241201a13508adeb0a57124f331c657b452N.exe
- Size
  
  88KB
- MD5
  
  9521c013f02760226426f1066f49c3f0
- SHA1
  
  121ed7d42f0c1e5733fc05b26a2a5e676cad614f
- SHA256
  
  b425af207da5a89232b86566a798a241201a13508adeb0a57124f331c657b452
- SHA512
  
  4d521c6e6739a91780b820c6304b6e4f4d3aa46056a15a0c31f25e892331c53e148d7f28ceb907328b3b19966d27c1d8aa11f334a8f1aaf097c02d289d9b2c9c
- SSDEEP
  
  1536:ez44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsNj:ezvokZR/KM/ysjwqWsNj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan