tinba | a567d12975080d8aae89f8ac4c1fcf4147b9e6cca4bfae9ea9ff913f38468ccd | Triage

Sharing

General

Target

a567d12975080d8aae89f8ac4c1fcf4147b9e6cca4bfae9ea9ff913f38468ccdN.exe
Size

225KB
Sample

241226-g23jgayndl
MD5

8e05ab547a14ba9ab00645620722a820
SHA1

1c0ccb5b7e5efccf23b6d43aa8515b9593a2f1e6
SHA256

a567d12975080d8aae89f8ac4c1fcf4147b9e6cca4bfae9ea9ff913f38468ccd
SHA512

a93281d3527fccf6c64c499a2dfcdaf0e0cbf084912728a0dd7f074edae9b6472d5ec8369eb02c89030bfb6cc85d127827ea795b73f81a0a8c81f5b60d508d58
SSDEEP

6144:dA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:dATuTAnKGwUAW3ycQqgd

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a567d12975080d8aae89f8ac4c1fcf4147b9e6cca4bfae9ea9ff913f38468ccdN.exe
- Size
  
  225KB
- MD5
  
  8e05ab547a14ba9ab00645620722a820
- SHA1
  
  1c0ccb5b7e5efccf23b6d43aa8515b9593a2f1e6
- SHA256
  
  a567d12975080d8aae89f8ac4c1fcf4147b9e6cca4bfae9ea9ff913f38468ccd
- SHA512
  
  a93281d3527fccf6c64c499a2dfcdaf0e0cbf084912728a0dd7f074edae9b6472d5ec8369eb02c89030bfb6cc85d127827ea795b73f81a0a8c81f5b60d508d58
- SSDEEP
  
  6144:dA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:dATuTAnKGwUAW3ycQqgd
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2