tinba | ce7ce4b8f20625ecc7cc6f376d1d93992f75a95dfa5e265c0705d35b2176daec | Triage

Sharing

General

Target

ce7ce4b8f20625ecc7cc6f376d1d93992f75a95dfa5e265c0705d35b2176daec.exe
Size

610KB
Sample

241231-q5j1zavrfl
MD5

a5d9f7f0be3a2859f16d9a67bfe64aa7
SHA1

32e370e6be9cc256a1be8ffae2df95d82f03f538
SHA256

ce7ce4b8f20625ecc7cc6f376d1d93992f75a95dfa5e265c0705d35b2176daec
SHA512

96b28024513f37dcaf99008c9974af32fe24da64231c969f3e495e3ea52a772f3c379b81f2a7b0e7fbdf894ff60b52de23a3a2e9ad0ce515d091e860dffd8953
SSDEEP

12288:ZATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:bT+KjUdQqboyyWoK1NGqzuh7

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ce7ce4b8f20625ecc7cc6f376d1d93992f75a95dfa5e265c0705d35b2176daec.exe
- Size
  
  610KB
- MD5
  
  a5d9f7f0be3a2859f16d9a67bfe64aa7
- SHA1
  
  32e370e6be9cc256a1be8ffae2df95d82f03f538
- SHA256
  
  ce7ce4b8f20625ecc7cc6f376d1d93992f75a95dfa5e265c0705d35b2176daec
- SHA512
  
  96b28024513f37dcaf99008c9974af32fe24da64231c969f3e495e3ea52a772f3c379b81f2a7b0e7fbdf894ff60b52de23a3a2e9ad0ce515d091e860dffd8953
- SSDEEP
  
  12288:ZATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:bT+KjUdQqboyyWoK1NGqzuh7
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2