tinba | 46edcc187126525ed68afa606d6d7316066b38d4f8171fc84edd1ac86270b439 | Triage

Sharing

General

Target

46edcc187126525ed68afa606d6d7316066b38d4f8171fc84edd1ac86270b439N.exe
Size

148KB
Sample

241222-fawfeatqdl
MD5

c12b00a1ca81def7926224033ed59350
SHA1

3d87da408633d9e380758b1590627f7e461c382b
SHA256

46edcc187126525ed68afa606d6d7316066b38d4f8171fc84edd1ac86270b439
SHA512

f9763c007991078b243e349b7962bc386198c9ea90a4a3585ad1a6c946100ee96bb3486ea8bc2349838ddc30a9b9f0f06648b822937ea280b086d0190c14faf7
SSDEEP

1536:rv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:i/dwh9uu39N81SbxthE8vCO

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  46edcc187126525ed68afa606d6d7316066b38d4f8171fc84edd1ac86270b439N.exe
- Size
  
  148KB
- MD5
  
  c12b00a1ca81def7926224033ed59350
- SHA1
  
  3d87da408633d9e380758b1590627f7e461c382b
- SHA256
  
  46edcc187126525ed68afa606d6d7316066b38d4f8171fc84edd1ac86270b439
- SHA512
  
  f9763c007991078b243e349b7962bc386198c9ea90a4a3585ad1a6c946100ee96bb3486ea8bc2349838ddc30a9b9f0f06648b822937ea280b086d0190c14faf7
- SSDEEP
  
  1536:rv+pJdyvHh9Yvu356AlGC/kpNfDnfn8bbxvVOu3MwJMaKtqj78gE8v27O:i/dwh9uu39N81SbxthE8vCO
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2