tinba | 54288d2aa3233090a81246964402d8d032277d74dd8f15b61784eb5be11541bd | Triage

Sharing

General

Target

54288d2aa3233090a81246964402d8d032277d74dd8f15b61784eb5be11541bdN.exe
Size

225KB
Sample

241129-p8nmws1ncq
MD5

575570656629c1e41df1f32e00e2d580
SHA1

fa228e8d260b6564391e1ea3b5f10d3fccf30c62
SHA256

54288d2aa3233090a81246964402d8d032277d74dd8f15b61784eb5be11541bd
SHA512

44fbb513fc6ccbe5b9c85150097553d0fa5d197a09015b2ff3aadb96f954fabb75163994c2f074aa76c85238e9d7280ba44f7a2a000400ff13ea1936ae8b85e0
SSDEEP

6144:8A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:8ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  54288d2aa3233090a81246964402d8d032277d74dd8f15b61784eb5be11541bdN.exe
- Size
  
  225KB
- MD5
  
  575570656629c1e41df1f32e00e2d580
- SHA1
  
  fa228e8d260b6564391e1ea3b5f10d3fccf30c62
- SHA256
  
  54288d2aa3233090a81246964402d8d032277d74dd8f15b61784eb5be11541bd
- SHA512
  
  44fbb513fc6ccbe5b9c85150097553d0fa5d197a09015b2ff3aadb96f954fabb75163994c2f074aa76c85238e9d7280ba44f7a2a000400ff13ea1936ae8b85e0
- SSDEEP
  
  6144:8A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:8ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2