tinba | 6fa75f281d25b20ba732cd581c0b920533a7e7d0530e622fcfd19ae55571ffe3 | Triage

Sharing

General

Target

6fa75f281d25b20ba732cd581c0b920533a7e7d0530e622fcfd19ae55571ffe3.exe
Size

88KB
Sample

250110-zqktdsxjcv
MD5

30db9986defeb0eeea6a4b750cb088ce
SHA1

50ae259fbbe198a9143c21039b4bf3ab5c8c993b
SHA256

6fa75f281d25b20ba732cd581c0b920533a7e7d0530e622fcfd19ae55571ffe3
SHA512

73f0a98af84ae91567ae5576a17970da3c845a1429ac0cb07f7cb65d37b054dd11205b876aa5bbc2915c912aa175b82c00d5dfe0ada20eb64374fbe1cf2f183a
SSDEEP

1536:0z44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsNI:0zvokZR/KM/ysjwqWsNI

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  6fa75f281d25b20ba732cd581c0b920533a7e7d0530e622fcfd19ae55571ffe3.exe
- Size
  
  88KB
- MD5
  
  30db9986defeb0eeea6a4b750cb088ce
- SHA1
  
  50ae259fbbe198a9143c21039b4bf3ab5c8c993b
- SHA256
  
  6fa75f281d25b20ba732cd581c0b920533a7e7d0530e622fcfd19ae55571ffe3
- SHA512
  
  73f0a98af84ae91567ae5576a17970da3c845a1429ac0cb07f7cb65d37b054dd11205b876aa5bbc2915c912aa175b82c00d5dfe0ada20eb64374fbe1cf2f183a
- SSDEEP
  
  1536:0z44CpRkr9DXhHf3aOd/56RrkQqjh+rmKVsNI:0zvokZR/KM/ysjwqWsNI
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan