tinba | 907c13bfa33453b0ca7ba8cc612344af2b5bc0f0be0c8f36306b42994df09a10 | Triage

Sharing

General

Target

907c13bfa33453b0ca7ba8cc612344af2b5bc0f0be0c8f36306b42994df09a10.exe
Size

610KB
Sample

241219-g4j5xatjbm
MD5

d9d6706313962fa087b6d737b5a185ab
SHA1

6dfc173424d828cc8410bcc4bdd0262155e14ea7
SHA256

907c13bfa33453b0ca7ba8cc612344af2b5bc0f0be0c8f36306b42994df09a10
SHA512

16a6f570a3fbcbc3d86253fc9e14443566937c99f5e0ebbde79e0d139f6c1742f68867ce0df383d8a724976be9c840688ca678adfc9b333f52ebf38cbd995808
SSDEEP

12288:EATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:6T+KjUdQqboyyWoK1NGqzuhp

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  907c13bfa33453b0ca7ba8cc612344af2b5bc0f0be0c8f36306b42994df09a10.exe
- Size
  
  610KB
- MD5
  
  d9d6706313962fa087b6d737b5a185ab
- SHA1
  
  6dfc173424d828cc8410bcc4bdd0262155e14ea7
- SHA256
  
  907c13bfa33453b0ca7ba8cc612344af2b5bc0f0be0c8f36306b42994df09a10
- SHA512
  
  16a6f570a3fbcbc3d86253fc9e14443566937c99f5e0ebbde79e0d139f6c1742f68867ce0df383d8a724976be9c840688ca678adfc9b333f52ebf38cbd995808
- SSDEEP
  
  12288:EATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:6T+KjUdQqboyyWoK1NGqzuhp
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2