tinba | b9295f41ab00fd6467658d0b7e1e4813df06bcb4d0ad66711077a6cf75c78ce0 | Triage

Sharing

General

Target

b9295f41ab00fd6467658d0b7e1e4813df06bcb4d0ad66711077a6cf75c78ce0N.exe
Size

88KB
Sample

250104-lpvejswlgn
MD5

acdf07bf052773161227c24cbd13e8f0
SHA1

3c38c5f4b4ad0b9e590357e968bef34defe3879e
SHA256

b9295f41ab00fd6467658d0b7e1e4813df06bcb4d0ad66711077a6cf75c78ce0
SHA512

db0b75a1877985e7b251308fdb33d9c71723e1696979d0bf9ff4537019ae6212a9d0b4364cd2ad789852f9434cf398a35448a6c9e160fc3cfedd247daeae145c
SSDEEP

1536:9z44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsN:9zvokZR/KM/ysjwqWsN

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  b9295f41ab00fd6467658d0b7e1e4813df06bcb4d0ad66711077a6cf75c78ce0N.exe
- Size
  
  88KB
- MD5
  
  acdf07bf052773161227c24cbd13e8f0
- SHA1
  
  3c38c5f4b4ad0b9e590357e968bef34defe3879e
- SHA256
  
  b9295f41ab00fd6467658d0b7e1e4813df06bcb4d0ad66711077a6cf75c78ce0
- SHA512
  
  db0b75a1877985e7b251308fdb33d9c71723e1696979d0bf9ff4537019ae6212a9d0b4364cd2ad789852f9434cf398a35448a6c9e160fc3cfedd247daeae145c
- SSDEEP
  
  1536:9z44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsN:9zvokZR/KM/ysjwqWsN
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan