tinba | 11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b | Triage™

Login
Reports

Overview

overview

Static

static

3

11a9678079...1b.exe

windows7-x64

11a9678079...1b.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe
Size 237KB
Sample241202-n7lapsylck
SHA256 11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b
MD5 5f03a81a0b4fcf480a8847f5a2b5ec94
SHA1 c94d195c20b36737f16c15dd04688a134b8ef0e6
SHA512 135a2af9cda069c8dd15a7d531ea895b1935787796b6f287ff7b6200790bda8b8a2022c7ed9fb3dd296d7a4cf2f398a3403ef94fd2202f21b6004b8dbf69a683
SSDEEP 6144:LA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:LATuTAnKGwUAWVycQqgR
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

tinba banker discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe

Resource

win7-20240708-en

windows7-x64

8 signatures

120 seconds

tinba banker discovery persistence trojan

Behavioral task

behavioral2

Sample

11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

8 signatures

120 seconds

Malware Config

Targets

- Target
  11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe
- Size 237KB
- SHA256 11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b
- MD5 5f03a81a0b4fcf480a8847f5a2b5ec94
- SHA1 c94d195c20b36737f16c15dd04688a134b8ef0e6
- SHA512 135a2af9cda069c8dd15a7d531ea895b1935787796b6f287ff7b6200790bda8b8a2022c7ed9fb3dd296d7a4cf2f398a3403ef94fd2202f21b6004b8dbf69a683
- SSDEEP 6144:LA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:LATuTAnKGwUAWVycQqgR
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

© 2018-2026

Terms | Privacy