tinba | 3812c78639561f390c5830a0c3626d17456969e1a2998bdd4931617ca566aa1b | Triage

Sharing

General

Target

3812c78639561f390c5830a0c3626d17456969e1a2998bdd4931617ca566aa1bN.exe
Size

225KB
Sample

250125-2pyd7ssqay
MD5

85b1e4826981d4085532ed1f2579d2c0
SHA1

46d3e3969cf866a7a338a698143d2c4db0626f07
SHA256

3812c78639561f390c5830a0c3626d17456969e1a2998bdd4931617ca566aa1b
SHA512

ecdd397fc3fb3edb0eb6af0424b610acfca525ef45027a27fd88a63ec433d6f21585b1fa9af4a9a30db95c0e953f65e9f49b85761e9e78708b37e399a93ea88d
SSDEEP

6144:wA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:wATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3812c78639561f390c5830a0c3626d17456969e1a2998bdd4931617ca566aa1bN.exe
- Size
  
  225KB
- MD5
  
  85b1e4826981d4085532ed1f2579d2c0
- SHA1
  
  46d3e3969cf866a7a338a698143d2c4db0626f07
- SHA256
  
  3812c78639561f390c5830a0c3626d17456969e1a2998bdd4931617ca566aa1b
- SHA512
  
  ecdd397fc3fb3edb0eb6af0424b610acfca525ef45027a27fd88a63ec433d6f21585b1fa9af4a9a30db95c0e953f65e9f49b85761e9e78708b37e399a93ea88d
- SSDEEP
  
  6144:wA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:wATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2