tinba | 11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b | Triage

Sharing

General

Target

11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe
Size

237KB
Sample

241202-n7lapsylck
MD5

5f03a81a0b4fcf480a8847f5a2b5ec94
SHA1

c94d195c20b36737f16c15dd04688a134b8ef0e6
SHA256

11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b
SHA512

135a2af9cda069c8dd15a7d531ea895b1935787796b6f287ff7b6200790bda8b8a2022c7ed9fb3dd296d7a4cf2f398a3403ef94fd2202f21b6004b8dbf69a683
SSDEEP

6144:LA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:LATuTAnKGwUAWVycQqgR

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b.exe
- Size
  
  237KB
- MD5
  
  5f03a81a0b4fcf480a8847f5a2b5ec94
- SHA1
  
  c94d195c20b36737f16c15dd04688a134b8ef0e6
- SHA256
  
  11a96780798a9bf8cc8618b8335164a6c5f6f324f8d4bf1187d561c790a8941b
- SHA512
  
  135a2af9cda069c8dd15a7d531ea895b1935787796b6f287ff7b6200790bda8b8a2022c7ed9fb3dd296d7a4cf2f398a3403ef94fd2202f21b6004b8dbf69a683
- SSDEEP
  
  6144:LA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:LATuTAnKGwUAWVycQqgR
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2