tinba | 6cb1195277c9ff86534fe6748705a06ad60db0b53a3810e55a7b86bb5d0f31ee | Triage

Sharing

General

Target

6cb1195277c9ff86534fe6748705a06ad60db0b53a3810e55a7b86bb5d0f31eeN.exe
Size

610KB
Sample

241203-v27p3svrc1
MD5

9f6b02630293fd7548160d914608ef90
SHA1

7aae5c2dff3ef15c22f8a8d6a61a0e7ab0ac3fd8
SHA256

6cb1195277c9ff86534fe6748705a06ad60db0b53a3810e55a7b86bb5d0f31ee
SHA512

915cc56f7dd06c8287c837132029543f003872a0f9943988a6c61f2e9668dc36e8eab45f7fc8690a772a67374ab97d9a3ee8bf9d624066a4d85f980aa8ff62e0
SSDEEP

12288:9ATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:nT+KjUdQqboyyWoK1NGqzuhj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6cb1195277c9ff86534fe6748705a06ad60db0b53a3810e55a7b86bb5d0f31eeN.exe
- Size
  
  610KB
- MD5
  
  9f6b02630293fd7548160d914608ef90
- SHA1
  
  7aae5c2dff3ef15c22f8a8d6a61a0e7ab0ac3fd8
- SHA256
  
  6cb1195277c9ff86534fe6748705a06ad60db0b53a3810e55a7b86bb5d0f31ee
- SHA512
  
  915cc56f7dd06c8287c837132029543f003872a0f9943988a6c61f2e9668dc36e8eab45f7fc8690a772a67374ab97d9a3ee8bf9d624066a4d85f980aa8ff62e0
- SSDEEP
  
  12288:9ATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:nT+KjUdQqboyyWoK1NGqzuhj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2