tinba | fe04ec7f1ffa0f12a5099a98fc5e5dfabf16004c821bac754c8d2302ce82fd73 | Triage

Sharing

General

Target

fe04ec7f1ffa0f12a5099a98fc5e5dfabf16004c821bac754c8d2302ce82fd73.exe
Size

237KB
Sample

250109-fvx5qsslaj
MD5

e8c752adad92304abf76ebf9ed708bb0
SHA1

ac5dd1a5a7083c042c84aeedca86f44eedb1e355
SHA256

fe04ec7f1ffa0f12a5099a98fc5e5dfabf16004c821bac754c8d2302ce82fd73
SHA512

2acfa2e4f37984cf759c34704896992e51b8a2e650d0724f8f0e00796776e767c64590524aaed868a7cad5b2076f7b743b6e8ab5a360f7b0e9641a245e6ef03c
SSDEEP

6144:NA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:NATuTAnKGwUAWVycQqgB

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  fe04ec7f1ffa0f12a5099a98fc5e5dfabf16004c821bac754c8d2302ce82fd73.exe
- Size
  
  237KB
- MD5
  
  e8c752adad92304abf76ebf9ed708bb0
- SHA1
  
  ac5dd1a5a7083c042c84aeedca86f44eedb1e355
- SHA256
  
  fe04ec7f1ffa0f12a5099a98fc5e5dfabf16004c821bac754c8d2302ce82fd73
- SHA512
  
  2acfa2e4f37984cf759c34704896992e51b8a2e650d0724f8f0e00796776e767c64590524aaed868a7cad5b2076f7b743b6e8ab5a360f7b0e9641a245e6ef03c
- SSDEEP
  
  6144:NA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYA:NATuTAnKGwUAWVycQqgB
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2