tinba | 54ed8234b91d04ce14f25fb116922bc8e876c49ab8d0a1ed8914983407f48092 | Triage

Sharing

General

Target

54ed8234b91d04ce14f25fb116922bc8e876c49ab8d0a1ed8914983407f48092.exe
Size

52KB
Sample

250117-encpsa1nhy
MD5

43ec651508b0945a021d2617f68d3609
SHA1

0598e148ac284366b23125efa59e1a5f8a936684
SHA256

54ed8234b91d04ce14f25fb116922bc8e876c49ab8d0a1ed8914983407f48092
SHA512

715cb1f126712c5aab7e2e93ae20d13d7b3f28a1849b008882fc93120eca1edd3f64f61483aece58819528c9f94274fbe42231005dee4a25d794944474783277
SSDEEP

768:fvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq9:DmZNZUXeQXFhS6sM3prUSGg7O1d9J+

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  54ed8234b91d04ce14f25fb116922bc8e876c49ab8d0a1ed8914983407f48092.exe
- Size
  
  52KB
- MD5
  
  43ec651508b0945a021d2617f68d3609
- SHA1
  
  0598e148ac284366b23125efa59e1a5f8a936684
- SHA256
  
  54ed8234b91d04ce14f25fb116922bc8e876c49ab8d0a1ed8914983407f48092
- SHA512
  
  715cb1f126712c5aab7e2e93ae20d13d7b3f28a1849b008882fc93120eca1edd3f64f61483aece58819528c9f94274fbe42231005dee4a25d794944474783277
- SSDEEP
  
  768:fvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq9:DmZNZUXeQXFhS6sM3prUSGg7O1d9J+
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan