tinba | 01193a058c7beb5cc31fc086045fc52fe52642445d7f73834afa386afe9c44fa | Triage

Sharing

General

Target

01193a058c7beb5cc31fc086045fc52fe52642445d7f73834afa386afe9c44faN.exe
Size

225KB
Sample

241205-n7tbbazldj
MD5

3f9f0e56fe057d081a80a5060ac94070
SHA1

be9f1c195fa10c5cea6a5cf6209a31994682a2a0
SHA256

01193a058c7beb5cc31fc086045fc52fe52642445d7f73834afa386afe9c44fa
SHA512

08c5e5dc7d24f2098e9dac85d93465b5c7e57aa32ebc9005393337e244d29bb31a3f6676b3a8674e6ecd1c0421270c5455ece6dc8a540d616d80cf6a9be58943
SSDEEP

6144:xA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:xATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  01193a058c7beb5cc31fc086045fc52fe52642445d7f73834afa386afe9c44faN.exe
- Size
  
  225KB
- MD5
  
  3f9f0e56fe057d081a80a5060ac94070
- SHA1
  
  be9f1c195fa10c5cea6a5cf6209a31994682a2a0
- SHA256
  
  01193a058c7beb5cc31fc086045fc52fe52642445d7f73834afa386afe9c44fa
- SHA512
  
  08c5e5dc7d24f2098e9dac85d93465b5c7e57aa32ebc9005393337e244d29bb31a3f6676b3a8674e6ecd1c0421270c5455ece6dc8a540d616d80cf6a9be58943
- SSDEEP
  
  6144:xA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:xATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2