tinba | 0d00b1d5cbb455e957532c32a77f2f3344f7d9f56fdb678f40691158c15a580e | Triage

Sharing

General

Target

0d00b1d5cbb455e957532c32a77f2f3344f7d9f56fdb678f40691158c15a580eN.exe
Size

237KB
Sample

241218-1w6tgstrgl
MD5

a6090bae9eb8e740b279f15c780ed410
SHA1

dac7252c006fc962675dd0362dbbf78b836bd437
SHA256

0d00b1d5cbb455e957532c32a77f2f3344f7d9f56fdb678f40691158c15a580e
SHA512

5499b7dccc0627b8b0dbdf85515b0a69ca0323ae64b1312cbecdca6dca103dedf9a134a9cc559b43cd6e3c35ea48fceb70fe55f4a02f7a58016c1a095714ca66
SSDEEP

6144:RA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:RATuTAnKGwUAWVycQqgR

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  0d00b1d5cbb455e957532c32a77f2f3344f7d9f56fdb678f40691158c15a580eN.exe
- Size
  
  237KB
- MD5
  
  a6090bae9eb8e740b279f15c780ed410
- SHA1
  
  dac7252c006fc962675dd0362dbbf78b836bd437
- SHA256
  
  0d00b1d5cbb455e957532c32a77f2f3344f7d9f56fdb678f40691158c15a580e
- SHA512
  
  5499b7dccc0627b8b0dbdf85515b0a69ca0323ae64b1312cbecdca6dca103dedf9a134a9cc559b43cd6e3c35ea48fceb70fe55f4a02f7a58016c1a095714ca66
- SSDEEP
  
  6144:RA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:RATuTAnKGwUAWVycQqgR
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2