tinba | 53666cd2d6f800f874f6ab3c7fcec7ba780dcd88c3ed0312d941e65bc4d267d8 | Triage

Sharing

General

Target

53666cd2d6f800f874f6ab3c7fcec7ba780dcd88c3ed0312d941e65bc4d267d8N.exe
Size

237KB
Sample

241207-16zsxsskdp
MD5

f0b2a451a3b7faafc99c9f63d0a4a010
SHA1

3463e18c3603b8d1f2a6ebb3bedebc8a33e224f1
SHA256

53666cd2d6f800f874f6ab3c7fcec7ba780dcd88c3ed0312d941e65bc4d267d8
SHA512

39e00ee97cb258b93ba0d4a7ee6d0aeeed1a2ef76d630b2dbc61bda7a50809ba680cb2029ffc99ac6c7791eccd8b7d4952b942f82896ab19c5959dc389fe586f
SSDEEP

6144:TA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:TATuTAnKGwUAWVycQqgR

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  53666cd2d6f800f874f6ab3c7fcec7ba780dcd88c3ed0312d941e65bc4d267d8N.exe
- Size
  
  237KB
- MD5
  
  f0b2a451a3b7faafc99c9f63d0a4a010
- SHA1
  
  3463e18c3603b8d1f2a6ebb3bedebc8a33e224f1
- SHA256
  
  53666cd2d6f800f874f6ab3c7fcec7ba780dcd88c3ed0312d941e65bc4d267d8
- SHA512
  
  39e00ee97cb258b93ba0d4a7ee6d0aeeed1a2ef76d630b2dbc61bda7a50809ba680cb2029ffc99ac6c7791eccd8b7d4952b942f82896ab19c5959dc389fe586f
- SSDEEP
  
  6144:TA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:TATuTAnKGwUAWVycQqgR
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2