tinba | 57a71849205b6e15b6dab3bf90d27d6291b20715fcd3fd563ff2ae59f3383a36 | Triage

Sharing

General

Target

57a71849205b6e15b6dab3bf90d27d6291b20715fcd3fd563ff2ae59f3383a36N.exe
Size

610KB
Sample

241204-jv7kysymby
MD5

85f263e1648b97c8efe0404f9f097ec0
SHA1

4b557534a3e14c0d455c95411fe2c1e3aee8d6fc
SHA256

57a71849205b6e15b6dab3bf90d27d6291b20715fcd3fd563ff2ae59f3383a36
SHA512

f994d856e0fd75b30adfad99a78dc59fbfde822b96b0a05715f93e64c533d7d797dfcd07b010096e8606b086ae01830cd33d760a8645db6fda2bf1e585519291
SSDEEP

12288:XATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:dT+KjUdQqboyyWoK1NGqzuhx

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  57a71849205b6e15b6dab3bf90d27d6291b20715fcd3fd563ff2ae59f3383a36N.exe
- Size
  
  610KB
- MD5
  
  85f263e1648b97c8efe0404f9f097ec0
- SHA1
  
  4b557534a3e14c0d455c95411fe2c1e3aee8d6fc
- SHA256
  
  57a71849205b6e15b6dab3bf90d27d6291b20715fcd3fd563ff2ae59f3383a36
- SHA512
  
  f994d856e0fd75b30adfad99a78dc59fbfde822b96b0a05715f93e64c533d7d797dfcd07b010096e8606b086ae01830cd33d760a8645db6fda2bf1e585519291
- SSDEEP
  
  12288:XATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:dT+KjUdQqboyyWoK1NGqzuhx
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2