tinba | dc08667ae3ca0a09e2d19075bde52074a2f9b50dfeb1f62a7465792d890a642d | Triage

Sharing

General

Target

dc08667ae3ca0a09e2d19075bde52074a2f9b50dfeb1f62a7465792d890a642dN.exe
Size

59KB
Sample

241207-18b5mswrhw
MD5

50e681a8f2d0afabdfb90fd0b2a87540
SHA1

81b7c32b670dd05bf4eb20a8a6e2e013d5c71cd2
SHA256

dc08667ae3ca0a09e2d19075bde52074a2f9b50dfeb1f62a7465792d890a642d
SHA512

ecd58c6eb9ab53d82fe370a397137a39fd64117a3ca5627dacbb568f675bb1e74922806bf4598e6310767145e825109217880183a72cf4d0e5773dcfa8f315c4
SSDEEP

768:5+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:5+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  dc08667ae3ca0a09e2d19075bde52074a2f9b50dfeb1f62a7465792d890a642dN.exe
- Size
  
  59KB
- MD5
  
  50e681a8f2d0afabdfb90fd0b2a87540
- SHA1
  
  81b7c32b670dd05bf4eb20a8a6e2e013d5c71cd2
- SHA256
  
  dc08667ae3ca0a09e2d19075bde52074a2f9b50dfeb1f62a7465792d890a642d
- SHA512
  
  ecd58c6eb9ab53d82fe370a397137a39fd64117a3ca5627dacbb568f675bb1e74922806bf4598e6310767145e825109217880183a72cf4d0e5773dcfa8f315c4
- SSDEEP
  
  768:5+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:5+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan