tinba | 095a8529534a416b4a645b718ee7db94a491ad8cdcf318206618978aa052916e | Triage

Sharing

General

Target

095a8529534a416b4a645b718ee7db94a491ad8cdcf318206618978aa052916e.exe
Size

610KB
Sample

241203-2x153aymf1
MD5

8a6d0d8191ac8ab078e17a878747b858
SHA1

521abe49259441d2dcc597e99404f70744727e0d
SHA256

095a8529534a416b4a645b718ee7db94a491ad8cdcf318206618978aa052916e
SHA512

fcc90c5b95695d16de47b85312515e44c818082a7d08e7236a4dc7187128b102868dfb6a4d1727b8e5473e8ab1507b66285413b89766ad2e99a2ad915c795104
SSDEEP

12288:kATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:aT+KjUdQqboyyWoK1NGqzuhp

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  095a8529534a416b4a645b718ee7db94a491ad8cdcf318206618978aa052916e.exe
- Size
  
  610KB
- MD5
  
  8a6d0d8191ac8ab078e17a878747b858
- SHA1
  
  521abe49259441d2dcc597e99404f70744727e0d
- SHA256
  
  095a8529534a416b4a645b718ee7db94a491ad8cdcf318206618978aa052916e
- SHA512
  
  fcc90c5b95695d16de47b85312515e44c818082a7d08e7236a4dc7187128b102868dfb6a4d1727b8e5473e8ab1507b66285413b89766ad2e99a2ad915c795104
- SSDEEP
  
  12288:kATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:aT+KjUdQqboyyWoK1NGqzuhp
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2