tinba | ce123f5fdd2842d3eed3afce81f1dd9ee6fab6a14b7f0cb7a8e4cd6192d2b8a6 | Triage

Sharing

General

Target

ce123f5fdd2842d3eed3afce81f1dd9ee6fab6a14b7f0cb7a8e4cd6192d2b8a6.exe
Size

610KB
Sample

241219-dz9yzswpfq
MD5

dffc159224597dd8dd4fd6da221fcd59
SHA1

cda35f3b6987f35267acb3fe4c42e21ad120b9c9
SHA256

ce123f5fdd2842d3eed3afce81f1dd9ee6fab6a14b7f0cb7a8e4cd6192d2b8a6
SHA512

fc5608479921ed893e58605780817a61b21266840b0ef26fb4092e5f8227521e1329c88de94199e0c8215af5f94fc51a782991fe3e22bf9d80518448d94f6637
SSDEEP

12288:IATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:2T+KjUdQqboyyWoK1NGqzuhT

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ce123f5fdd2842d3eed3afce81f1dd9ee6fab6a14b7f0cb7a8e4cd6192d2b8a6.exe
- Size
  
  610KB
- MD5
  
  dffc159224597dd8dd4fd6da221fcd59
- SHA1
  
  cda35f3b6987f35267acb3fe4c42e21ad120b9c9
- SHA256
  
  ce123f5fdd2842d3eed3afce81f1dd9ee6fab6a14b7f0cb7a8e4cd6192d2b8a6
- SHA512
  
  fc5608479921ed893e58605780817a61b21266840b0ef26fb4092e5f8227521e1329c88de94199e0c8215af5f94fc51a782991fe3e22bf9d80518448d94f6637
- SSDEEP
  
  12288:IATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:2T+KjUdQqboyyWoK1NGqzuhT
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2