tinba | b8f274e0d3c3a9af9d3006a91376fef4a4c6058fecee6a7c48e98dd27992a961 | Triage

Sharing

General

Target

b8f274e0d3c3a9af9d3006a91376fef4a4c6058fecee6a7c48e98dd27992a961.exe
Size

610KB
Sample

241226-mg6y2ssrb1
MD5

f8b2cc4e785b1f3d4696f70e0ea8a728
SHA1

6e509f679269eccb4a0c79ea83f92a42044e8357
SHA256

b8f274e0d3c3a9af9d3006a91376fef4a4c6058fecee6a7c48e98dd27992a961
SHA512

aeefebb4c9d6e4c6d39397742fcbe2b47231d536c1423c055ff22da68ff0a15924daec15a42c08f2b90c338ef53af9a27935c89f46c2fe89bf86f10dcd81290b
SSDEEP

12288:OATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:gT+KjUdQqboyyWoK1NGqzuhD

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b8f274e0d3c3a9af9d3006a91376fef4a4c6058fecee6a7c48e98dd27992a961.exe
- Size
  
  610KB
- MD5
  
  f8b2cc4e785b1f3d4696f70e0ea8a728
- SHA1
  
  6e509f679269eccb4a0c79ea83f92a42044e8357
- SHA256
  
  b8f274e0d3c3a9af9d3006a91376fef4a4c6058fecee6a7c48e98dd27992a961
- SHA512
  
  aeefebb4c9d6e4c6d39397742fcbe2b47231d536c1423c055ff22da68ff0a15924daec15a42c08f2b90c338ef53af9a27935c89f46c2fe89bf86f10dcd81290b
- SSDEEP
  
  12288:OATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:gT+KjUdQqboyyWoK1NGqzuhD
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2