tinba | 1aa4661fa0861c83ecda91a5d3e24aba58dccdb3fdfbd48fe6a0c4b2fd9c6cea | Triage

Sharing

General

Target

1aa4661fa0861c83ecda91a5d3e24aba58dccdb3fdfbd48fe6a0c4b2fd9c6ceaN.exe
Size

59KB
Sample

250117-nyj2aawkfv
MD5

52d096f11a2ff7051fd0575a4b593290
SHA1

056615ea6577f70036e1be0d2b312db1afb472ae
SHA256

1aa4661fa0861c83ecda91a5d3e24aba58dccdb3fdfbd48fe6a0c4b2fd9c6cea
SHA512

f20622f56bfa4d2fbfb8ef02e27b43f01aacab2197e0bf763ff9093354161f64f9cfc8e6fd00bbd45897fe63b81771379ee93632172de953697e7b5aecdd8183
SSDEEP

768:z+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9JF:z+mFM2HXKZgiFP7xIksu+XM5O9JF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  1aa4661fa0861c83ecda91a5d3e24aba58dccdb3fdfbd48fe6a0c4b2fd9c6ceaN.exe
- Size
  
  59KB
- MD5
  
  52d096f11a2ff7051fd0575a4b593290
- SHA1
  
  056615ea6577f70036e1be0d2b312db1afb472ae
- SHA256
  
  1aa4661fa0861c83ecda91a5d3e24aba58dccdb3fdfbd48fe6a0c4b2fd9c6cea
- SHA512
  
  f20622f56bfa4d2fbfb8ef02e27b43f01aacab2197e0bf763ff9093354161f64f9cfc8e6fd00bbd45897fe63b81771379ee93632172de953697e7b5aecdd8183
- SSDEEP
  
  768:z+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9JF:z+mFM2HXKZgiFP7xIksu+XM5O9JF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan