tinba | c8ec51a72b9ca02f970114fd0df89858b6083b416e24da0bbcb05a5ee982b31e | Triage

Sharing

General

Target

c8ec51a72b9ca02f970114fd0df89858b6083b416e24da0bbcb05a5ee982b31eN.exe
Size

610KB
Sample

241216-tk8qdavkgv
MD5

83a0abc914521942dca08ab196ea4a00
SHA1

5c31978803dcd7d0db043e3961f7ef2a70a786a9
SHA256

c8ec51a72b9ca02f970114fd0df89858b6083b416e24da0bbcb05a5ee982b31e
SHA512

eecbaf73e41f4ab09a0736723cd0267e5411a86d6804ccf22316d8bf3746a5ae75724971bb65ba482f69a53cb72844978e86b07ec87e204e8f0aa676651390cb
SSDEEP

12288:eATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:wT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  c8ec51a72b9ca02f970114fd0df89858b6083b416e24da0bbcb05a5ee982b31eN.exe
- Size
  
  610KB
- MD5
  
  83a0abc914521942dca08ab196ea4a00
- SHA1
  
  5c31978803dcd7d0db043e3961f7ef2a70a786a9
- SHA256
  
  c8ec51a72b9ca02f970114fd0df89858b6083b416e24da0bbcb05a5ee982b31e
- SHA512
  
  eecbaf73e41f4ab09a0736723cd0267e5411a86d6804ccf22316d8bf3746a5ae75724971bb65ba482f69a53cb72844978e86b07ec87e204e8f0aa676651390cb
- SSDEEP
  
  12288:eATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:wT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2