tinba | 9fbf192dbbc35ab334124fdd0f740431858dd6c74b25c1fa2a8acaa86d8a0a77 | Triage

Sharing

General

Target

9fbf192dbbc35ab334124fdd0f740431858dd6c74b25c1fa2a8acaa86d8a0a77N.exe
Size

123KB
Sample

241226-htazxsyrgy
MD5

f1f1d687152afc365a1492e0286f0190
SHA1

14f89341b5304bd44be082fb813cea1be3a0ba07
SHA256

9fbf192dbbc35ab334124fdd0f740431858dd6c74b25c1fa2a8acaa86d8a0a77
SHA512

fc81e309d129d1494b771bd8e687b96f5be8689c12dc46c92507be2f017103db12f457c9235146dde2c462bc52bb05bd155cd7519110deefa19c1744c1c422dd
SSDEEP

3072:D8q8/KGHNOMZXJEEOvd44Ts2ktrAN9j3gli0B0vHs7y5uoRz4:Dr8/KCXEEQd4oErAN9cPEZ5

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9fbf192dbbc35ab334124fdd0f740431858dd6c74b25c1fa2a8acaa86d8a0a77N.exe
- Size
  
  123KB
- MD5
  
  f1f1d687152afc365a1492e0286f0190
- SHA1
  
  14f89341b5304bd44be082fb813cea1be3a0ba07
- SHA256
  
  9fbf192dbbc35ab334124fdd0f740431858dd6c74b25c1fa2a8acaa86d8a0a77
- SHA512
  
  fc81e309d129d1494b771bd8e687b96f5be8689c12dc46c92507be2f017103db12f457c9235146dde2c462bc52bb05bd155cd7519110deefa19c1744c1c422dd
- SSDEEP
  
  3072:D8q8/KGHNOMZXJEEOvd44Ts2ktrAN9j3gli0B0vHs7y5uoRz4:Dr8/KCXEEQd4oErAN9cPEZ5
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan