tinba | 55bc1d48dcd9f5cdc54daa641496910212c045e6a1d31c1eac97ebd79a72614f | Triage

Sharing

General

Target

55bc1d48dcd9f5cdc54daa641496910212c045e6a1d31c1eac97ebd79a72614f.exe
Size

88KB
Sample

241201-ntx3cazrcv
MD5

59d5aa5cc890f9da4d49e27aa883295f
SHA1

e1ab83c118c391d779654a9619d1125f94a0c08b
SHA256

55bc1d48dcd9f5cdc54daa641496910212c045e6a1d31c1eac97ebd79a72614f
SHA512

2c99cbaa9ca011bd8d0b70d22c2dc311c4a2faef439890e88fc06b833f60ddfadb039fc677e34d2f8b71270e2b34ba38200adad6c89e79681d8158ee469bed4e
SSDEEP

1536:+5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:+5fvp12UFKcD/6jwqWsNI

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  55bc1d48dcd9f5cdc54daa641496910212c045e6a1d31c1eac97ebd79a72614f.exe
- Size
  
  88KB
- MD5
  
  59d5aa5cc890f9da4d49e27aa883295f
- SHA1
  
  e1ab83c118c391d779654a9619d1125f94a0c08b
- SHA256
  
  55bc1d48dcd9f5cdc54daa641496910212c045e6a1d31c1eac97ebd79a72614f
- SHA512
  
  2c99cbaa9ca011bd8d0b70d22c2dc311c4a2faef439890e88fc06b833f60ddfadb039fc677e34d2f8b71270e2b34ba38200adad6c89e79681d8158ee469bed4e
- SSDEEP
  
  1536:+5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:+5fvp12UFKcD/6jwqWsNI
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan