tinba | 33e0215f461121c0171260611d1ba6450d58fad48f23f297691de739bb1d9d95 | Triage

Sharing

General

Target

33e0215f461121c0171260611d1ba6450d58fad48f23f297691de739bb1d9d95.exe
Size

225KB
Sample

241222-j3sf1a1keq
MD5

046d0a2989cb2da5bd7125aea2a28606
SHA1

fcfbe1409936610d8cb5e14b446dd0f13f100e7d
SHA256

33e0215f461121c0171260611d1ba6450d58fad48f23f297691de739bb1d9d95
SHA512

888cb31f876143132073f834dd593ee25deb2ff767e856adbe214234af6d05e26fbf7070caf91b4748052909b26186148492d64d6a431d7d952aa74fd4c2d4fa
SSDEEP

6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgv

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  33e0215f461121c0171260611d1ba6450d58fad48f23f297691de739bb1d9d95.exe
- Size
  
  225KB
- MD5
  
  046d0a2989cb2da5bd7125aea2a28606
- SHA1
  
  fcfbe1409936610d8cb5e14b446dd0f13f100e7d
- SHA256
  
  33e0215f461121c0171260611d1ba6450d58fad48f23f297691de739bb1d9d95
- SHA512
  
  888cb31f876143132073f834dd593ee25deb2ff767e856adbe214234af6d05e26fbf7070caf91b4748052909b26186148492d64d6a431d7d952aa74fd4c2d4fa
- SSDEEP
  
  6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgv
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2