tinba | 90701a3781f6aece6aaf1d3605a02eedf159c9ae5ca685ded71b19bdfff20636 | Triage

Sharing

General

Target

90701a3781f6aece6aaf1d3605a02eedf159c9ae5ca685ded71b19bdfff20636.exe
Size

123KB
Sample

241226-k36t3asjep
MD5

7c98c0878b33e3987cc2e9d66344605e
SHA1

83356419aaba4d4676146938afd057cfe3441ae9
SHA256

90701a3781f6aece6aaf1d3605a02eedf159c9ae5ca685ded71b19bdfff20636
SHA512

de65e076140991bddb3e220fd24be12dd9974ac0fbd06da70db6b21f3cd7d618ccbde54a2a9f6cd7e72fb9968ef939ab2dae3494b5d6a74278fe89a7d4c196bd
SSDEEP

3072:D8q8/KGHNOMZXJEEOvd44Ts2ktrAN9j3gli0B0vHs7y5uoRz4s:Dr8/KCXEEQd4oErAN9cPEZ5B

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  90701a3781f6aece6aaf1d3605a02eedf159c9ae5ca685ded71b19bdfff20636.exe
- Size
  
  123KB
- MD5
  
  7c98c0878b33e3987cc2e9d66344605e
- SHA1
  
  83356419aaba4d4676146938afd057cfe3441ae9
- SHA256
  
  90701a3781f6aece6aaf1d3605a02eedf159c9ae5ca685ded71b19bdfff20636
- SHA512
  
  de65e076140991bddb3e220fd24be12dd9974ac0fbd06da70db6b21f3cd7d618ccbde54a2a9f6cd7e72fb9968ef939ab2dae3494b5d6a74278fe89a7d4c196bd
- SSDEEP
  
  3072:D8q8/KGHNOMZXJEEOvd44Ts2ktrAN9j3gli0B0vHs7y5uoRz4s:Dr8/KCXEEQd4oErAN9cPEZ5B
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan