tinba | 62a17cfee1e698b4f07ef9a76e1063637a45d602fef37e1d12ac652fe1231c40 | Triage

Sharing

General

Target

62a17cfee1e698b4f07ef9a76e1063637a45d602fef37e1d12ac652fe1231c40.exe
Size

225KB
Sample

241211-gj25zstrfm
MD5

93785cacbc252d2f92e5a6cc7a9da9a5
SHA1

14185fa1ca0440abe46c7e72e4a1b79376bc0c55
SHA256

62a17cfee1e698b4f07ef9a76e1063637a45d602fef37e1d12ac652fe1231c40
SHA512

95734315a9e5cf3ba5af3806404970bbfce3e3c720ee8da63e17bd4dc82580ec198fa7863e63dc8483a36fe36849c5f68d128114ed57014999ae6526de7fec0e
SSDEEP

6144:dA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:dATuTAnKGwUAW3ycQqgX

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  62a17cfee1e698b4f07ef9a76e1063637a45d602fef37e1d12ac652fe1231c40.exe
- Size
  
  225KB
- MD5
  
  93785cacbc252d2f92e5a6cc7a9da9a5
- SHA1
  
  14185fa1ca0440abe46c7e72e4a1b79376bc0c55
- SHA256
  
  62a17cfee1e698b4f07ef9a76e1063637a45d602fef37e1d12ac652fe1231c40
- SHA512
  
  95734315a9e5cf3ba5af3806404970bbfce3e3c720ee8da63e17bd4dc82580ec198fa7863e63dc8483a36fe36849c5f68d128114ed57014999ae6526de7fec0e
- SSDEEP
  
  6144:dA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:dATuTAnKGwUAW3ycQqgX
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2