tinba | a8e72369196791389f83d140079c68c4f9dc7dcd78a110d6f280fa5138c6f1c6 | Triage

Sharing

General

Target

a8e72369196791389f83d140079c68c4f9dc7dcd78a110d6f280fa5138c6f1c6N.exe
Size

237KB
Sample

241217-x5whbswpgk
MD5

d34ea63943359969d3677968b86b27e0
SHA1

7b7f84b853a518888ce50f14712fb39adf933d7f
SHA256

a8e72369196791389f83d140079c68c4f9dc7dcd78a110d6f280fa5138c6f1c6
SHA512

e0a4e31c757ce7ca54722eada2f9e286cfc7f78f8865f644baeb77253f5accb71d121541e4c20da26966b5360e04bac37eb0184c29baf43943c41feeb3d38a2e
SSDEEP

6144:NA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:NATuTAnKGwUAWVycQqgB

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a8e72369196791389f83d140079c68c4f9dc7dcd78a110d6f280fa5138c6f1c6N.exe
- Size
  
  237KB
- MD5
  
  d34ea63943359969d3677968b86b27e0
- SHA1
  
  7b7f84b853a518888ce50f14712fb39adf933d7f
- SHA256
  
  a8e72369196791389f83d140079c68c4f9dc7dcd78a110d6f280fa5138c6f1c6
- SHA512
  
  e0a4e31c757ce7ca54722eada2f9e286cfc7f78f8865f644baeb77253f5accb71d121541e4c20da26966b5360e04bac37eb0184c29baf43943c41feeb3d38a2e
- SSDEEP
  
  6144:NA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:NATuTAnKGwUAWVycQqgB
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2