tinba | 4db594f41818fa78fc5f41ba70ca2360bab47174baf74a3469c5253adf5caec2 | Triage

Sharing

General

Target

4db594f41818fa78fc5f41ba70ca2360bab47174baf74a3469c5253adf5caec2.exe
Size

225KB
Sample

241205-s8mmda1ke1
MD5

216702ad44c97b9e9f73372439e32c9e
SHA1

103d8d6b85ac8e7d241c0dab5ab278bbf45a77ce
SHA256

4db594f41818fa78fc5f41ba70ca2360bab47174baf74a3469c5253adf5caec2
SHA512

4b7f00d28cb0e7fdeba5923bcbb29ece96bb760c9a44274a02d9447b5adc3ed5bd38b84d06a34b8ee77443296771c2bd7d7ca7fb0b6e472cb2f51fb5de5a2a85
SSDEEP

6144:gA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:gATuTAnKGwUAW3ycQqgv

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  4db594f41818fa78fc5f41ba70ca2360bab47174baf74a3469c5253adf5caec2.exe
- Size
  
  225KB
- MD5
  
  216702ad44c97b9e9f73372439e32c9e
- SHA1
  
  103d8d6b85ac8e7d241c0dab5ab278bbf45a77ce
- SHA256
  
  4db594f41818fa78fc5f41ba70ca2360bab47174baf74a3469c5253adf5caec2
- SHA512
  
  4b7f00d28cb0e7fdeba5923bcbb29ece96bb760c9a44274a02d9447b5adc3ed5bd38b84d06a34b8ee77443296771c2bd7d7ca7fb0b6e472cb2f51fb5de5a2a85
- SSDEEP
  
  6144:gA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:gATuTAnKGwUAW3ycQqgv
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2