tinba | eb7b5e9087bacd2c9c7574f3d6e6b36f3151af0a8d0522400a54f86818bf07d1 | Triage

Sharing

General

Target

eb7b5e9087bacd2c9c7574f3d6e6b36f3151af0a8d0522400a54f86818bf07d1.exe
Size

225KB
Sample

241205-wfmnfsvnb1
MD5

9ad7a831c942439606c450dd8ff3b21d
SHA1

24bd33a0dfb372aaec2e8a4717e9fd25c070c44c
SHA256

eb7b5e9087bacd2c9c7574f3d6e6b36f3151af0a8d0522400a54f86818bf07d1
SHA512

d0ff42ecce6f4faf5876bb6ac44e47ea45271b7c1eadb9e374debe2fedcbdc60c7c14a0a61e3fee77c744c33458e8d65a62f1694e633158f449cc1f3317c00cf
SSDEEP

6144:xA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:xATuTAnKGwUAW3ycQqgV

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  eb7b5e9087bacd2c9c7574f3d6e6b36f3151af0a8d0522400a54f86818bf07d1.exe
- Size
  
  225KB
- MD5
  
  9ad7a831c942439606c450dd8ff3b21d
- SHA1
  
  24bd33a0dfb372aaec2e8a4717e9fd25c070c44c
- SHA256
  
  eb7b5e9087bacd2c9c7574f3d6e6b36f3151af0a8d0522400a54f86818bf07d1
- SHA512
  
  d0ff42ecce6f4faf5876bb6ac44e47ea45271b7c1eadb9e374debe2fedcbdc60c7c14a0a61e3fee77c744c33458e8d65a62f1694e633158f449cc1f3317c00cf
- SSDEEP
  
  6144:xA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:xATuTAnKGwUAW3ycQqgV
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2