tinba | e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318 | Triage

Sharing

General

Target

e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318N.exe
Size

238KB
Sample

250123-kqwtbssnc1
MD5

69db297fe4073f0412a5dedb81272550
SHA1

ccff27fec138a81da4c0374411af1c8b66e80928
SHA256

e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318
SHA512

5dff4537a55ba95c30ffa85f1b9e7153fe74659a7333f4d3d3939fd0d6455b4383de1f84f0e32f1007fb477bbd0bacaf2106147e18628da0ed4a1d7375133833
SSDEEP

6144:6mkLu0Aq9r8q7XMaC4+yPY7HLgZl3MovMfCp5CR:jkLsq9r8q7Xp27rk3Moa

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318N.exe
- Size
  
  238KB
- MD5
  
  69db297fe4073f0412a5dedb81272550
- SHA1
  
  ccff27fec138a81da4c0374411af1c8b66e80928
- SHA256
  
  e92cf1eae023b82497efede8a507974382dff7ec72681ca18e8673068053e318
- SHA512
  
  5dff4537a55ba95c30ffa85f1b9e7153fe74659a7333f4d3d3939fd0d6455b4383de1f84f0e32f1007fb477bbd0bacaf2106147e18628da0ed4a1d7375133833
- SSDEEP
  
  6144:6mkLu0Aq9r8q7XMaC4+yPY7HLgZl3MovMfCp5CR:jkLsq9r8q7Xp27rk3Moa
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2