tinba | aca820d912f8849b44f9dc04ce361e65a706091e95652f1cb05f50f2dad998d9 | Triage

Sharing

General

Target

aca820d912f8849b44f9dc04ce361e65a706091e95652f1cb05f50f2dad998d9N.exe
Size

225KB
Sample

241215-2szrfa1lby
MD5

b8fa1ba0ce6de767f44d559cc00b4b90
SHA1

365e1d38e82cfbbe8bd7caca8778f4e3897fd24f
SHA256

aca820d912f8849b44f9dc04ce361e65a706091e95652f1cb05f50f2dad998d9
SHA512

0738afce81ebd86300967324745d6f2e0b3cecfdfa070ce8bfd97ba810395b8ada9e24249610a79894e43f22707f4ca85847ce0b91f2333745a2ab1c0c687d83
SSDEEP

6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:bATuTAnKGwUAW3ycQqgF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  aca820d912f8849b44f9dc04ce361e65a706091e95652f1cb05f50f2dad998d9N.exe
- Size
  
  225KB
- MD5
  
  b8fa1ba0ce6de767f44d559cc00b4b90
- SHA1
  
  365e1d38e82cfbbe8bd7caca8778f4e3897fd24f
- SHA256
  
  aca820d912f8849b44f9dc04ce361e65a706091e95652f1cb05f50f2dad998d9
- SHA512
  
  0738afce81ebd86300967324745d6f2e0b3cecfdfa070ce8bfd97ba810395b8ada9e24249610a79894e43f22707f4ca85847ce0b91f2333745a2ab1c0c687d83
- SSDEEP
  
  6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:bATuTAnKGwUAW3ycQqgF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2