tinba | 061599e898a4a97facac909f26d66d4809529bb8505a6744c4e2e6a98d7262cc | Triage

Sharing

General

Target

061599e898a4a97facac909f26d66d4809529bb8505a6744c4e2e6a98d7262ccN.exe
Size

610KB
Sample

241231-jkj2xa1ndq
MD5

88196db453000afda94ff17f41f085e0
SHA1

7a63a0c157eda1f7ffc821426260ccb8c32b05d3
SHA256

061599e898a4a97facac909f26d66d4809529bb8505a6744c4e2e6a98d7262cc
SHA512

e43846e7d5a1e6b6ade2db086d3d17d510bb7dedfe9a237736e4a86ae7a31dc1c3860cf674d2051cae65adbb0b30332b0ee6cd78d9a8b742cf917cf1789f69e7
SSDEEP

12288:WATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:oT+KjUdQqboyyWoK1NGqzuhR

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  061599e898a4a97facac909f26d66d4809529bb8505a6744c4e2e6a98d7262ccN.exe
- Size
  
  610KB
- MD5
  
  88196db453000afda94ff17f41f085e0
- SHA1
  
  7a63a0c157eda1f7ffc821426260ccb8c32b05d3
- SHA256
  
  061599e898a4a97facac909f26d66d4809529bb8505a6744c4e2e6a98d7262cc
- SHA512
  
  e43846e7d5a1e6b6ade2db086d3d17d510bb7dedfe9a237736e4a86ae7a31dc1c3860cf674d2051cae65adbb0b30332b0ee6cd78d9a8b742cf917cf1789f69e7
- SSDEEP
  
  12288:WATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+E:oT+KjUdQqboyyWoK1NGqzuhR
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2