tinba | ce6abb7347a8df5df530daf53c37a5d581ee24f8b3e0b9ed4d3ce0824f497ffd | Triage

Sharing

General

Target

ce6abb7347a8df5df530daf53c37a5d581ee24f8b3e0b9ed4d3ce0824f497ffd.exe
Size

225KB
Sample

241204-c4pyyaxmez
MD5

463a02b7059643d326cd61a71398760f
SHA1

6172357df54d383a987d0646a373a4e38379577f
SHA256

ce6abb7347a8df5df530daf53c37a5d581ee24f8b3e0b9ed4d3ce0824f497ffd
SHA512

175a5156152b47ca9cb4571e724ae4a63cef1f4777786e948eb47e5291769da256c6452679ffb989023aede2b02cb09324219b61887da2229d0708940029cdf9
SSDEEP

6144:1A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:1ATuTAnKGwUAW3ycQqgN

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ce6abb7347a8df5df530daf53c37a5d581ee24f8b3e0b9ed4d3ce0824f497ffd.exe
- Size
  
  225KB
- MD5
  
  463a02b7059643d326cd61a71398760f
- SHA1
  
  6172357df54d383a987d0646a373a4e38379577f
- SHA256
  
  ce6abb7347a8df5df530daf53c37a5d581ee24f8b3e0b9ed4d3ce0824f497ffd
- SHA512
  
  175a5156152b47ca9cb4571e724ae4a63cef1f4777786e948eb47e5291769da256c6452679ffb989023aede2b02cb09324219b61887da2229d0708940029cdf9
- SSDEEP
  
  6144:1A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:1ATuTAnKGwUAW3ycQqgN
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2