tinba | 550231a95a3c21df0dbb744dbc1aceae709f1d74f20433c401b6305b103c4894 | Triage

Sharing

General

Target

550231a95a3c21df0dbb744dbc1aceae709f1d74f20433c401b6305b103c4894.exe
Size

225KB
Sample

250101-3weq4stman
MD5

7c520c461022daf403380f0d145b757e
SHA1

2cd313c9b0127f2c381d019c4fa7c8fe185d2b73
SHA256

550231a95a3c21df0dbb744dbc1aceae709f1d74f20433c401b6305b103c4894
SHA512

2e400602a7ea5ba1dec6d573963a8924836b8aeaa1f5c2212662805cbabbc7ccbfa80c482d3a88208b8734783df052a81a63b042b425fe4d6dda52c4ae1eb92f
SSDEEP

6144:fA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:fATuTAnKGwUAW3ycQqgN

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  550231a95a3c21df0dbb744dbc1aceae709f1d74f20433c401b6305b103c4894.exe
- Size
  
  225KB
- MD5
  
  7c520c461022daf403380f0d145b757e
- SHA1
  
  2cd313c9b0127f2c381d019c4fa7c8fe185d2b73
- SHA256
  
  550231a95a3c21df0dbb744dbc1aceae709f1d74f20433c401b6305b103c4894
- SHA512
  
  2e400602a7ea5ba1dec6d573963a8924836b8aeaa1f5c2212662805cbabbc7ccbfa80c482d3a88208b8734783df052a81a63b042b425fe4d6dda52c4ae1eb92f
- SSDEEP
  
  6144:fA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpY0:fATuTAnKGwUAW3ycQqgN
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2