tinba | 13214e38645f16b53a3b46f2396d2a84e0506b8d4d1369ec2cc69bf0568652ac | Triage

Sharing

General

Target

13214e38645f16b53a3b46f2396d2a84e0506b8d4d1369ec2cc69bf0568652ac.exe
Size

237KB
Sample

241219-hl5vbstkcy
MD5

2766add6e6e28f3f66691aa89fd9b132
SHA1

7a99a7bfed619593062a94500b41232e63f794cd
SHA256

13214e38645f16b53a3b46f2396d2a84e0506b8d4d1369ec2cc69bf0568652ac
SHA512

1afb3d9b56a32bc58a7bb933c8f5d494b836cadad8353d2d58b35a8a2ed7aac6a34e07ee76698f435125b84a8ed2c65b220a29e5340756b2417c19944f14e782
SSDEEP

6144:dA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:dATuTAnKGwUAWVycQqgL

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  13214e38645f16b53a3b46f2396d2a84e0506b8d4d1369ec2cc69bf0568652ac.exe
- Size
  
  237KB
- MD5
  
  2766add6e6e28f3f66691aa89fd9b132
- SHA1
  
  7a99a7bfed619593062a94500b41232e63f794cd
- SHA256
  
  13214e38645f16b53a3b46f2396d2a84e0506b8d4d1369ec2cc69bf0568652ac
- SHA512
  
  1afb3d9b56a32bc58a7bb933c8f5d494b836cadad8353d2d58b35a8a2ed7aac6a34e07ee76698f435125b84a8ed2c65b220a29e5340756b2417c19944f14e782
- SSDEEP
  
  6144:dA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:dATuTAnKGwUAWVycQqgL
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2