tinba | 40a432671310be48078d8ef1708451b3d2a5436b2d5a419c8bdfa4c91c1c2631 | Triage

Sharing

General

Target

40a432671310be48078d8ef1708451b3d2a5436b2d5a419c8bdfa4c91c1c2631N.exe
Size

59KB
Sample

241206-1khbraypdx
MD5

1e5cdf8ef9ff028e73bd64d01a112c60
SHA1

07a9abc5bdcf88e10f8d54db6076a77cb862d96a
SHA256

40a432671310be48078d8ef1708451b3d2a5436b2d5a419c8bdfa4c91c1c2631
SHA512

ceacfed9a4db37f26046a607311ee7a9012871239f9fe4b5d2d06d020aaa4a7b687d9e2d47b35ef3ef549de8887d07f36b73a89022abfa7071bb572b0bbf76c5
SSDEEP

768:K+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:K+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  40a432671310be48078d8ef1708451b3d2a5436b2d5a419c8bdfa4c91c1c2631N.exe
- Size
  
  59KB
- MD5
  
  1e5cdf8ef9ff028e73bd64d01a112c60
- SHA1
  
  07a9abc5bdcf88e10f8d54db6076a77cb862d96a
- SHA256
  
  40a432671310be48078d8ef1708451b3d2a5436b2d5a419c8bdfa4c91c1c2631
- SHA512
  
  ceacfed9a4db37f26046a607311ee7a9012871239f9fe4b5d2d06d020aaa4a7b687d9e2d47b35ef3ef549de8887d07f36b73a89022abfa7071bb572b0bbf76c5
- SSDEEP
  
  768:K+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:K+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan