tinba | 7786f19b976f195cd492566db53dfe398bb4db7463d150e01187efe278a82d7f | Triage

Sharing

General

Target

7786f19b976f195cd492566db53dfe398bb4db7463d150e01187efe278a82d7f.exe
Size

225KB
Sample

241218-amp69stqe1
MD5

cabe266d972568da4ba7741894f794d3
SHA1

b08b3693045568efc1f6167bb0f823a73af977d7
SHA256

7786f19b976f195cd492566db53dfe398bb4db7463d150e01187efe278a82d7f
SHA512

c130e9be47a254029dd70e50556805fc9d12e6c3deab9b081e54194834b9bff48a3ab6b21390cbc9b52079e268a07013a5eee92bfd25582ac5cf1f261516a51f
SSDEEP

6144:MA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:MATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7786f19b976f195cd492566db53dfe398bb4db7463d150e01187efe278a82d7f.exe
- Size
  
  225KB
- MD5
  
  cabe266d972568da4ba7741894f794d3
- SHA1
  
  b08b3693045568efc1f6167bb0f823a73af977d7
- SHA256
  
  7786f19b976f195cd492566db53dfe398bb4db7463d150e01187efe278a82d7f
- SHA512
  
  c130e9be47a254029dd70e50556805fc9d12e6c3deab9b081e54194834b9bff48a3ab6b21390cbc9b52079e268a07013a5eee92bfd25582ac5cf1f261516a51f
- SSDEEP
  
  6144:MA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:MATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2