tinba | 26abdd2e35d2767d3a19aad562ee78d2282575ac9cc5b6f99aa10a6554edb1ee | Triage

Sharing

General

Target

26abdd2e35d2767d3a19aad562ee78d2282575ac9cc5b6f99aa10a6554edb1eeN.exe
Size

225KB
Sample

241208-aqmkjsxnej
MD5

1c8fe3795eb57e71e5766067d2057970
SHA1

bbea556e43c46eff8656d9577b5ee0b516edc27a
SHA256

26abdd2e35d2767d3a19aad562ee78d2282575ac9cc5b6f99aa10a6554edb1ee
SHA512

fdc3c073ada59c93cea46128a33f2c076c3a65b50c3c8a37568ddcbe9ef6ac63371e75af13725fbf5e632fac3b87c26a42a6156d8d4143287b6878aec7df5cca
SSDEEP

6144:SA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:SATuTAnKGwUAW3ycQqgl

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  26abdd2e35d2767d3a19aad562ee78d2282575ac9cc5b6f99aa10a6554edb1eeN.exe
- Size
  
  225KB
- MD5
  
  1c8fe3795eb57e71e5766067d2057970
- SHA1
  
  bbea556e43c46eff8656d9577b5ee0b516edc27a
- SHA256
  
  26abdd2e35d2767d3a19aad562ee78d2282575ac9cc5b6f99aa10a6554edb1ee
- SHA512
  
  fdc3c073ada59c93cea46128a33f2c076c3a65b50c3c8a37568ddcbe9ef6ac63371e75af13725fbf5e632fac3b87c26a42a6156d8d4143287b6878aec7df5cca
- SSDEEP
  
  6144:SA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:SATuTAnKGwUAW3ycQqgl
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2