tinba | a81fa094a0322dd87d6fb4ae368e96750aabce0a206c55c2584bb1caa9118d1c | Triage

Sharing

General

Target

a81fa094a0322dd87d6fb4ae368e96750aabce0a206c55c2584bb1caa9118d1c.exe
Size

89KB
Sample

250113-jjs87asqht
MD5

f0d0b4d8af0fe46144e89feaf18fb55e
SHA1

cc6de4662a347dd85d762ce6b0d7d40d40f762da
SHA256

a81fa094a0322dd87d6fb4ae368e96750aabce0a206c55c2584bb1caa9118d1c
SHA512

3b461b6e62c39adce4be99e81bbf05cdceb250a0b8550c907ed4d18e892751f4768f2e650c546236d965b039a52db5a7035d9a80ccaa0d63e51729b8a1f0cc14
SSDEEP

1536:+z44CpRkr9DXhH/2m//56RrufqjhzrmKIFAV0Eh:+zvokZRfN/yFj1qrFAHh

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a81fa094a0322dd87d6fb4ae368e96750aabce0a206c55c2584bb1caa9118d1c.exe
- Size
  
  89KB
- MD5
  
  f0d0b4d8af0fe46144e89feaf18fb55e
- SHA1
  
  cc6de4662a347dd85d762ce6b0d7d40d40f762da
- SHA256
  
  a81fa094a0322dd87d6fb4ae368e96750aabce0a206c55c2584bb1caa9118d1c
- SHA512
  
  3b461b6e62c39adce4be99e81bbf05cdceb250a0b8550c907ed4d18e892751f4768f2e650c546236d965b039a52db5a7035d9a80ccaa0d63e51729b8a1f0cc14
- SSDEEP
  
  1536:+z44CpRkr9DXhH/2m//56RrufqjhzrmKIFAV0Eh:+zvokZRfN/yFj1qrFAHh
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan