tinba | 36546cca53dc1cbb43044ce6f0102cf492317d418588c21b5cc571e63ef87c42 | Triage

Sharing

General

Target

36546cca53dc1cbb43044ce6f0102cf492317d418588c21b5cc571e63ef87c42N.exe
Size

225KB
Sample

241208-cmvg4awrbv
MD5

8bc0d060d7bf4296e53dbba8a7c0b9a0
SHA1

5ab0902ac7be936d6e9c678c6b5e7ca626aa2363
SHA256

36546cca53dc1cbb43044ce6f0102cf492317d418588c21b5cc571e63ef87c42
SHA512

690ddc18910d8ebb37d1242453e7776a40c9a911239a6f4f588f2b4968a2345f4ed5723ff80714df2e9442fda0658206aeea7cc1bacaff8f9017b9dbcc3aa842
SSDEEP

6144:sA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:sATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  36546cca53dc1cbb43044ce6f0102cf492317d418588c21b5cc571e63ef87c42N.exe
- Size
  
  225KB
- MD5
  
  8bc0d060d7bf4296e53dbba8a7c0b9a0
- SHA1
  
  5ab0902ac7be936d6e9c678c6b5e7ca626aa2363
- SHA256
  
  36546cca53dc1cbb43044ce6f0102cf492317d418588c21b5cc571e63ef87c42
- SHA512
  
  690ddc18910d8ebb37d1242453e7776a40c9a911239a6f4f588f2b4968a2345f4ed5723ff80714df2e9442fda0658206aeea7cc1bacaff8f9017b9dbcc3aa842
- SSDEEP
  
  6144:sA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:sATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2