tinba | a4e932886a35c13a51e58dca93333ae433dd3c6c12448a584f4874ce796a681e | Triage

Sharing

General

Target

a4e932886a35c13a51e58dca93333ae433dd3c6c12448a584f4874ce796a681eN.exe
Size

52KB
Sample

241220-halx3ssqfq
MD5

82c236a339fe6cd32f01aa2c104fa7f0
SHA1

6bbf2649df17bc922c579d5aa5903cd9cd6456ae
SHA256

a4e932886a35c13a51e58dca93333ae433dd3c6c12448a584f4874ce796a681e
SHA512

c537b28b93710de8155086f32e61b0b0a458609ca15de2286d337b4f62fb3317eee729e895976be4acbc279bba500e44209684490f5696a803b1afecc3ae5b75
SSDEEP

768:6vC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:KmZNZUXeQXFhS6sM3prUSGg7O1d9Ja

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a4e932886a35c13a51e58dca93333ae433dd3c6c12448a584f4874ce796a681eN.exe
- Size
  
  52KB
- MD5
  
  82c236a339fe6cd32f01aa2c104fa7f0
- SHA1
  
  6bbf2649df17bc922c579d5aa5903cd9cd6456ae
- SHA256
  
  a4e932886a35c13a51e58dca93333ae433dd3c6c12448a584f4874ce796a681e
- SHA512
  
  c537b28b93710de8155086f32e61b0b0a458609ca15de2286d337b4f62fb3317eee729e895976be4acbc279bba500e44209684490f5696a803b1afecc3ae5b75
- SSDEEP
  
  768:6vC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:KmZNZUXeQXFhS6sM3prUSGg7O1d9Ja
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan