tinba | 1a9e0b3100d2edb25eb35a62a152991cf4aa51a2ae757a80dbbffb40d959017f | Triage

Sharing

General

Target

1a9e0b3100d2edb25eb35a62a152991cf4aa51a2ae757a80dbbffb40d959017fN.exe
Size

52KB
Sample

241201-by6ttsxjar
MD5

bce2068f5ce67d10a6f6404597437500
SHA1

78de9a6ec8b5750a082e7e81d268712f3ea0c3ab
SHA256

1a9e0b3100d2edb25eb35a62a152991cf4aa51a2ae757a80dbbffb40d959017f
SHA512

10f6c355d27d42eba72eca3da23f6dccfa4b7cd5af6edce79a091176a2c0dbd76b1662463fc9aab3343c77cd05e51786387c976449abafc66c93ff7b4a1946ef
SSDEEP

768:PvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:TmZNZUXeQXFhS6sM3prUSGg7O1d9Ja

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  1a9e0b3100d2edb25eb35a62a152991cf4aa51a2ae757a80dbbffb40d959017fN.exe
- Size
  
  52KB
- MD5
  
  bce2068f5ce67d10a6f6404597437500
- SHA1
  
  78de9a6ec8b5750a082e7e81d268712f3ea0c3ab
- SHA256
  
  1a9e0b3100d2edb25eb35a62a152991cf4aa51a2ae757a80dbbffb40d959017f
- SHA512
  
  10f6c355d27d42eba72eca3da23f6dccfa4b7cd5af6edce79a091176a2c0dbd76b1662463fc9aab3343c77cd05e51786387c976449abafc66c93ff7b4a1946ef
- SSDEEP
  
  768:PvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:TmZNZUXeQXFhS6sM3prUSGg7O1d9Ja
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan