tinba | 26c56b493ba908ba314f365b3484db7ba060b716df4a0c770e3a32bdb98dd1ca | Triage

Sharing

General

Target

26c56b493ba908ba314f365b3484db7ba060b716df4a0c770e3a32bdb98dd1ca.exe
Size

225KB
Sample

241202-d2a8faspbk
MD5

ee837b393a7cecaada84579b46577ecd
SHA1

cbc3d93206cb41f7d1ee23fbce28844498cace5d
SHA256

26c56b493ba908ba314f365b3484db7ba060b716df4a0c770e3a32bdb98dd1ca
SHA512

1959f6bf67b67efdd17ae9ac7f1369087b9695bea864007f2fe80133fb89d44e3181eb3601e33ab604dd4ee3245a8cb5b6417092fec6b4cfbbb4914d8b3db752
SSDEEP

6144:1A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:1ATuTAnKGwUAW3ycQqgF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  26c56b493ba908ba314f365b3484db7ba060b716df4a0c770e3a32bdb98dd1ca.exe
- Size
  
  225KB
- MD5
  
  ee837b393a7cecaada84579b46577ecd
- SHA1
  
  cbc3d93206cb41f7d1ee23fbce28844498cace5d
- SHA256
  
  26c56b493ba908ba314f365b3484db7ba060b716df4a0c770e3a32bdb98dd1ca
- SHA512
  
  1959f6bf67b67efdd17ae9ac7f1369087b9695bea864007f2fe80133fb89d44e3181eb3601e33ab604dd4ee3245a8cb5b6417092fec6b4cfbbb4914d8b3db752
- SSDEEP
  
  6144:1A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:1ATuTAnKGwUAW3ycQqgF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2