tinba | 721b09e59311a6c98d4e7500baf334b3bd3bbc7b1497c3bb782e149a0267f264 | Triage

Sharing

General

Target

721b09e59311a6c98d4e7500baf334b3bd3bbc7b1497c3bb782e149a0267f264.exe
Size

610KB
Sample

241225-w8mh6aspcm
MD5

05c785cff90081fe294c8c8a6a38e8b2
SHA1

88dcce3432223ed1f82de31efe67da31b2d7be81
SHA256

721b09e59311a6c98d4e7500baf334b3bd3bbc7b1497c3bb782e149a0267f264
SHA512

dc81385934af56cc4b987ae2266546d1514ba183d65c10d21ff258c952614c67f52abfb5af74e9854e50d60a7c082edd56eb497db437b03be07f1c8f0b9cbf1c
SSDEEP

12288:EATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:6T+KjUdQqboyyWoK1NGqzuhj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  721b09e59311a6c98d4e7500baf334b3bd3bbc7b1497c3bb782e149a0267f264.exe
- Size
  
  610KB
- MD5
  
  05c785cff90081fe294c8c8a6a38e8b2
- SHA1
  
  88dcce3432223ed1f82de31efe67da31b2d7be81
- SHA256
  
  721b09e59311a6c98d4e7500baf334b3bd3bbc7b1497c3bb782e149a0267f264
- SHA512
  
  dc81385934af56cc4b987ae2266546d1514ba183d65c10d21ff258c952614c67f52abfb5af74e9854e50d60a7c082edd56eb497db437b03be07f1c8f0b9cbf1c
- SSDEEP
  
  12288:EATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:6T+KjUdQqboyyWoK1NGqzuhj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2