tinba | e27bb617f275714b301f5a73afb055ea8b75cfa0a8d01850be60fdaf22817130 | Triage

Sharing

General

Target

e27bb617f275714b301f5a73afb055ea8b75cfa0a8d01850be60fdaf22817130.exe
Size

59KB
Sample

250124-2q313ssngv
MD5

11dbd3b89a7eba591434bae7f34feef1
SHA1

16887b950fcd85c3588c06545d12e37fd2f83bd3
SHA256

e27bb617f275714b301f5a73afb055ea8b75cfa0a8d01850be60fdaf22817130
SHA512

c2468f73ea78813ee01761055e2ca2cc8411d34da1b4493ff292a0c3d066d8f3aff0ad9ec84c2c58116b4d1a7783bf2373488af1e231c5509f276198f30d7047
SSDEEP

768:T+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9Jn:T+mFM2HXKZgiFP7xIksu+XM5O9Jn

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e27bb617f275714b301f5a73afb055ea8b75cfa0a8d01850be60fdaf22817130.exe
- Size
  
  59KB
- MD5
  
  11dbd3b89a7eba591434bae7f34feef1
- SHA1
  
  16887b950fcd85c3588c06545d12e37fd2f83bd3
- SHA256
  
  e27bb617f275714b301f5a73afb055ea8b75cfa0a8d01850be60fdaf22817130
- SHA512
  
  c2468f73ea78813ee01761055e2ca2cc8411d34da1b4493ff292a0c3d066d8f3aff0ad9ec84c2c58116b4d1a7783bf2373488af1e231c5509f276198f30d7047
- SSDEEP
  
  768:T+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9Jn:T+mFM2HXKZgiFP7xIksu+XM5O9Jn
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan