tinba | a53ec090d41e2ce3181401cbf815302c07848f7cda7ed4a31eb64ce159137940 | Triage

Sharing

General

Target

a53ec090d41e2ce3181401cbf815302c07848f7cda7ed4a31eb64ce159137940.exe
Size

168KB
Sample

241204-ccmdqs1lhn
MD5

354b0acf19b469bf28fb6ed0d67943a4
SHA1

342c4c422fe7105b0881b56f98b3d5c11d716009
SHA256

a53ec090d41e2ce3181401cbf815302c07848f7cda7ed4a31eb64ce159137940
SHA512

a37747a97ac8b015452b7e0e328854b43e1767116b344848705f1f60a67c1d8ab92b887836b74f814e81eb50ddc91b5c4777ac4b871dda79eb7d1b4a1c184ed3
SSDEEP

3072:R+//K1KJAR6KtqDSB8NojBOryOIy4IwiyO+//K1KJR3lW:GKkmVtqWB8NojgrvIy4RiypKkflW

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a53ec090d41e2ce3181401cbf815302c07848f7cda7ed4a31eb64ce159137940.exe
- Size
  
  168KB
- MD5
  
  354b0acf19b469bf28fb6ed0d67943a4
- SHA1
  
  342c4c422fe7105b0881b56f98b3d5c11d716009
- SHA256
  
  a53ec090d41e2ce3181401cbf815302c07848f7cda7ed4a31eb64ce159137940
- SHA512
  
  a37747a97ac8b015452b7e0e328854b43e1767116b344848705f1f60a67c1d8ab92b887836b74f814e81eb50ddc91b5c4777ac4b871dda79eb7d1b4a1c184ed3
- SSDEEP
  
  3072:R+//K1KJAR6KtqDSB8NojBOryOIy4IwiyO+//K1KJR3lW:GKkmVtqWB8NojgrvIy4RiypKkflW
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan