tinba | d4936ad4aedf4903da253250e7418b153dc57752eaef3b3e3e702bd8dc7937f2 | Triage

Sharing

General

Target

d4936ad4aedf4903da253250e7418b153dc57752eaef3b3e3e702bd8dc7937f2.exe
Size

59KB
Sample

241206-jbq4vswpfs
MD5

d17e08e14e101184bd81e7675a77882e
SHA1

cd6586cd069cb713bae2a5d16be7343734e33c9b
SHA256

d4936ad4aedf4903da253250e7418b153dc57752eaef3b3e3e702bd8dc7937f2
SHA512

3b474ca392719d660fdb98e7ae1542a2cdff28d453db8b782ee78496baa94a874082619f8d8175ec7c14e39903a731461ce3bd718d9c60e8ade556931e0d32e9
SSDEEP

768:w+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9Jl:w+mFM2HXKZgiFP7xIksu+XM5O9Jl

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  d4936ad4aedf4903da253250e7418b153dc57752eaef3b3e3e702bd8dc7937f2.exe
- Size
  
  59KB
- MD5
  
  d17e08e14e101184bd81e7675a77882e
- SHA1
  
  cd6586cd069cb713bae2a5d16be7343734e33c9b
- SHA256
  
  d4936ad4aedf4903da253250e7418b153dc57752eaef3b3e3e702bd8dc7937f2
- SHA512
  
  3b474ca392719d660fdb98e7ae1542a2cdff28d453db8b782ee78496baa94a874082619f8d8175ec7c14e39903a731461ce3bd718d9c60e8ade556931e0d32e9
- SSDEEP
  
  768:w+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9Jl:w+mFM2HXKZgiFP7xIksu+XM5O9Jl
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan