tinba | 9ad74aa05d231514c953281b0f31f4febb15deb1b543040d46fd1aca809eb844 | Triage

Sharing

General

Target

9ad74aa05d231514c953281b0f31f4febb15deb1b543040d46fd1aca809eb844N.exe
Size

225KB
Sample

241211-plgaaswrhm
MD5

7ac5282b13a0e4c516311533cfe711a0
SHA1

91b948c61195fdca16fe2aa7e61b9df1462035e3
SHA256

9ad74aa05d231514c953281b0f31f4febb15deb1b543040d46fd1aca809eb844
SHA512

b67ad2aab9aabd99232bbe81d738fcf415f42511daca42c517d6d69e56ab868c6fe0575328e0fe55db24e1e31af0dad6448eabf11e798a96c351cd6a6645f238
SSDEEP

6144:DA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:DATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9ad74aa05d231514c953281b0f31f4febb15deb1b543040d46fd1aca809eb844N.exe
- Size
  
  225KB
- MD5
  
  7ac5282b13a0e4c516311533cfe711a0
- SHA1
  
  91b948c61195fdca16fe2aa7e61b9df1462035e3
- SHA256
  
  9ad74aa05d231514c953281b0f31f4febb15deb1b543040d46fd1aca809eb844
- SHA512
  
  b67ad2aab9aabd99232bbe81d738fcf415f42511daca42c517d6d69e56ab868c6fe0575328e0fe55db24e1e31af0dad6448eabf11e798a96c351cd6a6645f238
- SSDEEP
  
  6144:DA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:DATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2