tinba | 93d1441a2d2a105134e86c79ee2d1f54ca40a20cb634873d92a91428b5555082 | Triage

Sharing

General

Target

93d1441a2d2a105134e86c79ee2d1f54ca40a20cb634873d92a91428b5555082N.exe
Size

52KB
Sample

250104-r2f1kstmcy
MD5

74b14e8c7741f925fda4e924523e1fb0
SHA1

05e3d648420c8df95808a84ee983a0a34c4190c3
SHA256

93d1441a2d2a105134e86c79ee2d1f54ca40a20cb634873d92a91428b5555082
SHA512

6bb513d1e0b1696e9b52e3654070492cb1080d9372fc5b39a0177023da329abcef3dd548d0f2f9798703510f48b200b1a31dcf4f16fbfb5581959e959c4b600f
SSDEEP

768:avC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:qmZNZUXeQXFhS6sM3prUSGg7O1d9Ja

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  93d1441a2d2a105134e86c79ee2d1f54ca40a20cb634873d92a91428b5555082N.exe
- Size
  
  52KB
- MD5
  
  74b14e8c7741f925fda4e924523e1fb0
- SHA1
  
  05e3d648420c8df95808a84ee983a0a34c4190c3
- SHA256
  
  93d1441a2d2a105134e86c79ee2d1f54ca40a20cb634873d92a91428b5555082
- SHA512
  
  6bb513d1e0b1696e9b52e3654070492cb1080d9372fc5b39a0177023da329abcef3dd548d0f2f9798703510f48b200b1a31dcf4f16fbfb5581959e959c4b600f
- SSDEEP
  
  768:avC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq/:qmZNZUXeQXFhS6sM3prUSGg7O1d9Ja
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan