tinba | 70150da3f9d60cccbbb6d2a7151e2832ba77598ba9951c69206ff34094757e36 | Triage

Sharing

General

Target

70150da3f9d60cccbbb6d2a7151e2832ba77598ba9951c69206ff34094757e36N.exe
Size

225KB
Sample

241210-w61m1atjg1
MD5

6a87e46be5511e45b5e0c0f67f176540
SHA1

90051e70afb34d20f5f89c52e93e696b4683ca43
SHA256

70150da3f9d60cccbbb6d2a7151e2832ba77598ba9951c69206ff34094757e36
SHA512

257cc4b3d8170c6809b44663046fd0a26dc8a8943cfac9342646d27ba8b994b6863868d40d6bb6301706291a31f385d6029aa9fa35646a2da26d4a2cfdc211ef
SSDEEP

6144:FA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:FATuTAnKGwUAW3ycQqg1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  70150da3f9d60cccbbb6d2a7151e2832ba77598ba9951c69206ff34094757e36N.exe
- Size
  
  225KB
- MD5
  
  6a87e46be5511e45b5e0c0f67f176540
- SHA1
  
  90051e70afb34d20f5f89c52e93e696b4683ca43
- SHA256
  
  70150da3f9d60cccbbb6d2a7151e2832ba77598ba9951c69206ff34094757e36
- SHA512
  
  257cc4b3d8170c6809b44663046fd0a26dc8a8943cfac9342646d27ba8b994b6863868d40d6bb6301706291a31f385d6029aa9fa35646a2da26d4a2cfdc211ef
- SSDEEP
  
  6144:FA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:FATuTAnKGwUAW3ycQqg1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2