tinba | 5be2f998348fa82007d3eb3058599909ab62d643168957d9fbb89b02679ba270 | Triage

Sharing

General

Target

5be2f998348fa82007d3eb3058599909ab62d643168957d9fbb89b02679ba270N.exe
Size

225KB
Sample

241204-kzyz2s1jdx
MD5

7fcf16ce38adf1c5199d182c8612fa30
SHA1

030b08ef9f7e3bc207617f00f0b918b67fdd1f90
SHA256

5be2f998348fa82007d3eb3058599909ab62d643168957d9fbb89b02679ba270
SHA512

b1b7b211a39d14ab9831039599dad538b6cfca6f8585621abe0c0a23789872ae690fdffee135f012b58f237a8d10070ec5c3adf471f5b2d22ed418185a59c889
SSDEEP

6144:QA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:QATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  5be2f998348fa82007d3eb3058599909ab62d643168957d9fbb89b02679ba270N.exe
- Size
  
  225KB
- MD5
  
  7fcf16ce38adf1c5199d182c8612fa30
- SHA1
  
  030b08ef9f7e3bc207617f00f0b918b67fdd1f90
- SHA256
  
  5be2f998348fa82007d3eb3058599909ab62d643168957d9fbb89b02679ba270
- SHA512
  
  b1b7b211a39d14ab9831039599dad538b6cfca6f8585621abe0c0a23789872ae690fdffee135f012b58f237a8d10070ec5c3adf471f5b2d22ed418185a59c889
- SSDEEP
  
  6144:QA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:QATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2