tinba | 6aa4bc3a66b5b17a32055906150d1112adf621b546d8d3028b4e18c2b03e04b6 | Triage

Sharing

General

Target

6aa4bc3a66b5b17a32055906150d1112adf621b546d8d3028b4e18c2b03e04b6.exe
Size

225KB
Sample

241203-h2vpas1jgq
MD5

5a2ee4c4ebad313cdc5ab130b46b34cd
SHA1

8dd7ebf1ed237ca6be86100760f09554eb72e8d7
SHA256

6aa4bc3a66b5b17a32055906150d1112adf621b546d8d3028b4e18c2b03e04b6
SHA512

cd8baa05b9c1ea988772bed9b91e1c206e43beb313262d16cd0e476694a3b7c7e553d5d34eafa5ab32b76b89a3088d5001c999fc167bf5d59784632c63ca39e8
SSDEEP

6144:QA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:QATuTAnKGwUAW3ycQqgl

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6aa4bc3a66b5b17a32055906150d1112adf621b546d8d3028b4e18c2b03e04b6.exe
- Size
  
  225KB
- MD5
  
  5a2ee4c4ebad313cdc5ab130b46b34cd
- SHA1
  
  8dd7ebf1ed237ca6be86100760f09554eb72e8d7
- SHA256
  
  6aa4bc3a66b5b17a32055906150d1112adf621b546d8d3028b4e18c2b03e04b6
- SHA512
  
  cd8baa05b9c1ea988772bed9b91e1c206e43beb313262d16cd0e476694a3b7c7e553d5d34eafa5ab32b76b89a3088d5001c999fc167bf5d59784632c63ca39e8
- SSDEEP
  
  6144:QA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:QATuTAnKGwUAW3ycQqgl
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2