tinba | c3bb0cea06a0214b1b61813a37de8e73d943fef38895b258727f38f249fa9194 | Triage

Sharing

General

Target

c3bb0cea06a0214b1b61813a37de8e73d943fef38895b258727f38f249fa9194N.exe
Size

610KB
Sample

241219-bh58cszndw
MD5

dbd9f11920e43b3c350698dff60e2fb0
SHA1

798cee496214210ad1c89a9d92de64f9e371dd57
SHA256

c3bb0cea06a0214b1b61813a37de8e73d943fef38895b258727f38f249fa9194
SHA512

1a642206bbfe3ae9cf8e12d41119fef5916819f99f8fde12e72f132f521a9c417f4592df48f023d7fc9c46634168b70a5bf46a07f3c676e2bca0cebe736d32d5
SSDEEP

12288:SATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:MT+KjUdQqboyyWoK1NGqzuhL

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  c3bb0cea06a0214b1b61813a37de8e73d943fef38895b258727f38f249fa9194N.exe
- Size
  
  610KB
- MD5
  
  dbd9f11920e43b3c350698dff60e2fb0
- SHA1
  
  798cee496214210ad1c89a9d92de64f9e371dd57
- SHA256
  
  c3bb0cea06a0214b1b61813a37de8e73d943fef38895b258727f38f249fa9194
- SHA512
  
  1a642206bbfe3ae9cf8e12d41119fef5916819f99f8fde12e72f132f521a9c417f4592df48f023d7fc9c46634168b70a5bf46a07f3c676e2bca0cebe736d32d5
- SSDEEP
  
  12288:SATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:MT+KjUdQqboyyWoK1NGqzuhL
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2