tinba | 9b29e7190f438854f5cc7782b79045d24b90236e0767bdc805ff9dffb033c1e5 | Triage

Sharing

General

Target

9b29e7190f438854f5cc7782b79045d24b90236e0767bdc805ff9dffb033c1e5N.exe
Size

610KB
Sample

241219-b7xbra1pev
MD5

47815464c4298337882751601ca78be0
SHA1

cbee9cedefaee5b7809a9f67b66ab9f628a51e77
SHA256

9b29e7190f438854f5cc7782b79045d24b90236e0767bdc805ff9dffb033c1e5
SHA512

151094d485a911af19df736755175f8632bec9e6faaefadb73520037b70720535633bb695e6095a1c187dcd1beb43d8ac96c50556be9f640215f475b4560f8e2
SSDEEP

12288:VATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:/T+KjUdQqboyyWoK1NGqzuhx

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9b29e7190f438854f5cc7782b79045d24b90236e0767bdc805ff9dffb033c1e5N.exe
- Size
  
  610KB
- MD5
  
  47815464c4298337882751601ca78be0
- SHA1
  
  cbee9cedefaee5b7809a9f67b66ab9f628a51e77
- SHA256
  
  9b29e7190f438854f5cc7782b79045d24b90236e0767bdc805ff9dffb033c1e5
- SHA512
  
  151094d485a911af19df736755175f8632bec9e6faaefadb73520037b70720535633bb695e6095a1c187dcd1beb43d8ac96c50556be9f640215f475b4560f8e2
- SSDEEP
  
  12288:VATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:/T+KjUdQqboyyWoK1NGqzuhx
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2