tinba | 9f74c1d2e7a249dab34487b1572118b45a939e85c202d158cb96847d1afd56de | Triage

Sharing

General

Target

9f74c1d2e7a249dab34487b1572118b45a939e85c202d158cb96847d1afd56deN.exe
Size

237KB
Sample

241231-j9danatphl
MD5

84a99961b40a5c18f579295f5c36dd50
SHA1

f967e3e42d596accf43de8969add738b18ef6439
SHA256

9f74c1d2e7a249dab34487b1572118b45a939e85c202d158cb96847d1afd56de
SHA512

3025747d6039a33de51d6a449cd5e28a8182d61962ae78615f46f9b441d0e9b08f6488ef40baa27ffd11b766a5280098a1ea4bf787038cc6114eab7726e687f5
SSDEEP

6144:uA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:uATuTAnKGwUAWVycQqgr

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  9f74c1d2e7a249dab34487b1572118b45a939e85c202d158cb96847d1afd56deN.exe
- Size
  
  237KB
- MD5
  
  84a99961b40a5c18f579295f5c36dd50
- SHA1
  
  f967e3e42d596accf43de8969add738b18ef6439
- SHA256
  
  9f74c1d2e7a249dab34487b1572118b45a939e85c202d158cb96847d1afd56de
- SHA512
  
  3025747d6039a33de51d6a449cd5e28a8182d61962ae78615f46f9b441d0e9b08f6488ef40baa27ffd11b766a5280098a1ea4bf787038cc6114eab7726e687f5
- SSDEEP
  
  6144:uA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:uATuTAnKGwUAWVycQqgr
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2