tinba | 4c09b5eaca6edcec6138a72ebbe4be60364fb83feb66aadb9fc1d44203e1dae0 | Triage

Sharing

General

Target

4c09b5eaca6edcec6138a72ebbe4be60364fb83feb66aadb9fc1d44203e1dae0.exe
Size

225KB
Sample

241203-kfhtqasrdl
MD5

5a3deff4e60a6a77dfc2719fc4de835a
SHA1

282094c0ffc070ec167baea8fcac69ca1d15503a
SHA256

4c09b5eaca6edcec6138a72ebbe4be60364fb83feb66aadb9fc1d44203e1dae0
SHA512

183c0c51411f55d66c25647aa4c1f5eec45cf88e9ccf79d1dfdae862e7a986d65f90196fb5831f77b7ea77fd92105916a09a5621a3c9f7fa4a4eec1aedea8c15
SSDEEP

6144:WA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:WATuTAnKGwUAW3ycQqgl

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  4c09b5eaca6edcec6138a72ebbe4be60364fb83feb66aadb9fc1d44203e1dae0.exe
- Size
  
  225KB
- MD5
  
  5a3deff4e60a6a77dfc2719fc4de835a
- SHA1
  
  282094c0ffc070ec167baea8fcac69ca1d15503a
- SHA256
  
  4c09b5eaca6edcec6138a72ebbe4be60364fb83feb66aadb9fc1d44203e1dae0
- SHA512
  
  183c0c51411f55d66c25647aa4c1f5eec45cf88e9ccf79d1dfdae862e7a986d65f90196fb5831f77b7ea77fd92105916a09a5621a3c9f7fa4a4eec1aedea8c15
- SSDEEP
  
  6144:WA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:WATuTAnKGwUAW3ycQqgl
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2