tinba | f55bcf3a656e792ff2850793882547027fc51ce7aa26ea8e2872983a56f68663 | Triage

Sharing

General

Target

f55bcf3a656e792ff2850793882547027fc51ce7aa26ea8e2872983a56f68663N.exe
Size

610KB
Sample

241203-a3c7ms1lg1
MD5

5e0a4b481f1729c71026587fb46ce3a0
SHA1

499b44674dd9b065ea30ef4ebed927b24cdf1c51
SHA256

f55bcf3a656e792ff2850793882547027fc51ce7aa26ea8e2872983a56f68663
SHA512

0b76ca2c769b50cf5b81d845314a7126acddaf3bb46c3b3bb04800c2999fdb3212fd87b2c8df33598f999d75c102a0bccd3c2be5c4d21d6fcd19407d74a7f307
SSDEEP

12288:oATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:WT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  f55bcf3a656e792ff2850793882547027fc51ce7aa26ea8e2872983a56f68663N.exe
- Size
  
  610KB
- MD5
  
  5e0a4b481f1729c71026587fb46ce3a0
- SHA1
  
  499b44674dd9b065ea30ef4ebed927b24cdf1c51
- SHA256
  
  f55bcf3a656e792ff2850793882547027fc51ce7aa26ea8e2872983a56f68663
- SHA512
  
  0b76ca2c769b50cf5b81d845314a7126acddaf3bb46c3b3bb04800c2999fdb3212fd87b2c8df33598f999d75c102a0bccd3c2be5c4d21d6fcd19407d74a7f307
- SSDEEP
  
  12288:oATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:WT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2