tinba | 761d4545474e3575b3d09339dbc18ffc6b1fd304e1014fa097f7f0c8259a8eba | Triage

Sharing

General

Target

761d4545474e3575b3d09339dbc18ffc6b1fd304e1014fa097f7f0c8259a8ebaN.exe
Size

225KB
Sample

241208-afl62axjbp
MD5

ea76c3020b55cbd58170039d25375730
SHA1

ead8834110addff8df08f19cc844bdf105740ad0
SHA256

761d4545474e3575b3d09339dbc18ffc6b1fd304e1014fa097f7f0c8259a8eba
SHA512

ab25e3c6bf3d6d7cb796e5182208102c12183ef04b198b2a88b575ec2da30e881ef588d695cb7bca698634a42958c766c7b3c1a04aa793e35b83d121803fda87
SSDEEP

6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  761d4545474e3575b3d09339dbc18ffc6b1fd304e1014fa097f7f0c8259a8ebaN.exe
- Size
  
  225KB
- MD5
  
  ea76c3020b55cbd58170039d25375730
- SHA1
  
  ead8834110addff8df08f19cc844bdf105740ad0
- SHA256
  
  761d4545474e3575b3d09339dbc18ffc6b1fd304e1014fa097f7f0c8259a8eba
- SHA512
  
  ab25e3c6bf3d6d7cb796e5182208102c12183ef04b198b2a88b575ec2da30e881ef588d695cb7bca698634a42958c766c7b3c1a04aa793e35b83d121803fda87
- SSDEEP
  
  6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2