tinba | fcf17af7763dda7d1c6c1ac93984191c15247b4d68fd1ca8bcebaa1f15a7b1ef | Triage

Sharing

General

Target

fcf17af7763dda7d1c6c1ac93984191c15247b4d68fd1ca8bcebaa1f15a7b1efN.exe
Size

225KB
Sample

241219-g48hhasldx
MD5

0325ee601e299bba4e71cac94bc8fdf0
SHA1

1fe74e5337d55b9f681d82a4560e162a96c82b4b
SHA256

fcf17af7763dda7d1c6c1ac93984191c15247b4d68fd1ca8bcebaa1f15a7b1ef
SHA512

0001c808b982f01473a6011ac1fbb0fe74c76d7dcafb88a8dba303be78baae8ed7b5c72232d3e4131ab956ae4c9d1f90bb4fd96584846a61f28952d8b95e566f
SSDEEP

6144:9A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:9ATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  fcf17af7763dda7d1c6c1ac93984191c15247b4d68fd1ca8bcebaa1f15a7b1efN.exe
- Size
  
  225KB
- MD5
  
  0325ee601e299bba4e71cac94bc8fdf0
- SHA1
  
  1fe74e5337d55b9f681d82a4560e162a96c82b4b
- SHA256
  
  fcf17af7763dda7d1c6c1ac93984191c15247b4d68fd1ca8bcebaa1f15a7b1ef
- SHA512
  
  0001c808b982f01473a6011ac1fbb0fe74c76d7dcafb88a8dba303be78baae8ed7b5c72232d3e4131ab956ae4c9d1f90bb4fd96584846a61f28952d8b95e566f
- SSDEEP
  
  6144:9A2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:9ATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2