tinba | e8f328e7c90e7f645c215bc8ffa7e36215eedecee7298105fe079e4ba4764490 | Triage

Sharing

General

Target

e8f328e7c90e7f645c215bc8ffa7e36215eedecee7298105fe079e4ba4764490.exe
Size

610KB
Sample

241209-qjppbsymaw
MD5

d5d2d00031fbc536e638379103a4e7b3
SHA1

1f13d866958c7527933c6ce0e5160dc715b54934
SHA256

e8f328e7c90e7f645c215bc8ffa7e36215eedecee7298105fe079e4ba4764490
SHA512

57e7636b75b3f8604cfeaac6d0e40b1b10c50b18f90334a740535a5e3fe009138fc63fbb46cf1326cd6edf5503dc25ecf2aa51a74ae4edc01b4f2e7ad3e1bb28
SSDEEP

12288:YATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:GT+KjUdQqboyyWoK1NGqzuhh

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e8f328e7c90e7f645c215bc8ffa7e36215eedecee7298105fe079e4ba4764490.exe
- Size
  
  610KB
- MD5
  
  d5d2d00031fbc536e638379103a4e7b3
- SHA1
  
  1f13d866958c7527933c6ce0e5160dc715b54934
- SHA256
  
  e8f328e7c90e7f645c215bc8ffa7e36215eedecee7298105fe079e4ba4764490
- SHA512
  
  57e7636b75b3f8604cfeaac6d0e40b1b10c50b18f90334a740535a5e3fe009138fc63fbb46cf1326cd6edf5503dc25ecf2aa51a74ae4edc01b4f2e7ad3e1bb28
- SSDEEP
  
  12288:YATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:GT+KjUdQqboyyWoK1NGqzuhh
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2