tinba | 10515322698fe2433301ed8e13164d3371798b008fee10238d53415665ed806a | Triage

Sharing

General

Target

10515322698fe2433301ed8e13164d3371798b008fee10238d53415665ed806a.exe
Size

610KB
Sample

241222-h5wqrsyrdl
MD5

ca0efcad730c56201e0785c9c53574f2
SHA1

d0d1d023d4a401efcea05e193532851f7df77713
SHA256

10515322698fe2433301ed8e13164d3371798b008fee10238d53415665ed806a
SHA512

5eecfc4c53afceb77ba2be5c2a309114e360d7f7d53a5754099dfb51d99c4fd8946225a1f42e6f105d75266a0c41d663799f7d73858472cb2244254dad463937
SSDEEP

12288:3ATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:9T+KjUdQqboyyWoK1NGqzuhj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  10515322698fe2433301ed8e13164d3371798b008fee10238d53415665ed806a.exe
- Size
  
  610KB
- MD5
  
  ca0efcad730c56201e0785c9c53574f2
- SHA1
  
  d0d1d023d4a401efcea05e193532851f7df77713
- SHA256
  
  10515322698fe2433301ed8e13164d3371798b008fee10238d53415665ed806a
- SHA512
  
  5eecfc4c53afceb77ba2be5c2a309114e360d7f7d53a5754099dfb51d99c4fd8946225a1f42e6f105d75266a0c41d663799f7d73858472cb2244254dad463937
- SSDEEP
  
  12288:3ATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:9T+KjUdQqboyyWoK1NGqzuhj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2