tinba | 09ed6a5e48083a972d46fe32a42f340f38ca5956a9f44ba1459ff55be6fe497c | Triage

Sharing

General

Target

09ed6a5e48083a972d46fe32a42f340f38ca5956a9f44ba1459ff55be6fe497cN.exe
Size

67KB
Sample

241220-czfvgaxjax
MD5

81cebedc9d2b913510423c2dbd618940
SHA1

83f8800364bbc2f001150be43b7a156ef6eb8898
SHA256

09ed6a5e48083a972d46fe32a42f340f38ca5956a9f44ba1459ff55be6fe497c
SHA512

9a023f40794a7a7e0cda9bec56a25b6b573c216b1fa6dab139ba400157e84a187c39641bb67fe94c6eb6071b741450f1afcd3b2796a9d63348d346276cc0960a
SSDEEP

768:8V0sdE7t4RZeEUOwIK2TG5aPvnnbr368T3u5TfU+NLFaYCCGacz+CZc9JT:8Vc8eATK2TQaCGe5bzNL0RNG9JT

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  09ed6a5e48083a972d46fe32a42f340f38ca5956a9f44ba1459ff55be6fe497cN.exe
- Size
  
  67KB
- MD5
  
  81cebedc9d2b913510423c2dbd618940
- SHA1
  
  83f8800364bbc2f001150be43b7a156ef6eb8898
- SHA256
  
  09ed6a5e48083a972d46fe32a42f340f38ca5956a9f44ba1459ff55be6fe497c
- SHA512
  
  9a023f40794a7a7e0cda9bec56a25b6b573c216b1fa6dab139ba400157e84a187c39641bb67fe94c6eb6071b741450f1afcd3b2796a9d63348d346276cc0960a
- SSDEEP
  
  768:8V0sdE7t4RZeEUOwIK2TG5aPvnnbr368T3u5TfU+NLFaYCCGacz+CZc9JT:8Vc8eATK2TQaCGe5bzNL0RNG9JT
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan