tinba | 3fba7257b582f47b76804b5eb01cd2af0679afaa48779c3a790ec254dcd15a6c | Triage

Sharing

General

Target

3fba7257b582f47b76804b5eb01cd2af0679afaa48779c3a790ec254dcd15a6cN.exe
Size

225KB
Sample

241215-14sxlazjbw
MD5

b1be0d2ca5a4715fbc6cb6ee586dec50
SHA1

506182417d6fb72041aeb465ee72293fe4ea44dc
SHA256

3fba7257b582f47b76804b5eb01cd2af0679afaa48779c3a790ec254dcd15a6c
SHA512

6ac4bba5c27a7aebcf906dc2572f4bf0cf62d5122745b17250081a95010b5907c71c5a1c93e2315b2bdecc090fb97dd1d5f30af052e99c1f74824be9ceff6b65
SSDEEP

6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3fba7257b582f47b76804b5eb01cd2af0679afaa48779c3a790ec254dcd15a6cN.exe
- Size
  
  225KB
- MD5
  
  b1be0d2ca5a4715fbc6cb6ee586dec50
- SHA1
  
  506182417d6fb72041aeb465ee72293fe4ea44dc
- SHA256
  
  3fba7257b582f47b76804b5eb01cd2af0679afaa48779c3a790ec254dcd15a6c
- SHA512
  
  6ac4bba5c27a7aebcf906dc2572f4bf0cf62d5122745b17250081a95010b5907c71c5a1c93e2315b2bdecc090fb97dd1d5f30af052e99c1f74824be9ceff6b65
- SSDEEP
  
  6144:5A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:5ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2