tinba | 42842a45d9d666225a611511484db5c1581a1c31ff59f28ffd06df232de858e8 | Triage

Sharing

General

Target

42842a45d9d666225a611511484db5c1581a1c31ff59f28ffd06df232de858e8N.exe
Size

88KB
Sample

241218-mfztcavma1
MD5

d9069028240e6c4e6b0cc8cc1fe04890
SHA1

e2c2470103e118e3eba1281f19d48cea3a5ad323
SHA256

42842a45d9d666225a611511484db5c1581a1c31ff59f28ffd06df232de858e8
SHA512

fb3a9f46f091114daf8d409b2266b1c0130996f48c6aec94f18a3b0de6f00f8a68e10ddd4a7212076e3df84dc712af2699819945a60ffaa26d9af52ea0cb838e
SSDEEP

1536:L5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:L5fvp12UFKcD/6jwqWsNI

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  42842a45d9d666225a611511484db5c1581a1c31ff59f28ffd06df232de858e8N.exe
- Size
  
  88KB
- MD5
  
  d9069028240e6c4e6b0cc8cc1fe04890
- SHA1
  
  e2c2470103e118e3eba1281f19d48cea3a5ad323
- SHA256
  
  42842a45d9d666225a611511484db5c1581a1c31ff59f28ffd06df232de858e8
- SHA512
  
  fb3a9f46f091114daf8d409b2266b1c0130996f48c6aec94f18a3b0de6f00f8a68e10ddd4a7212076e3df84dc712af2699819945a60ffaa26d9af52ea0cb838e
- SSDEEP
  
  1536:L5nfmIpxDWbUfd3aOPmxxEhvgCooXqRQqjh+rmKVsNI:L5fvp12UFKcD/6jwqWsNI
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan