tinba | 4db4219896b4aae40bfbf9d91b44a4ca24301516476206e9acb27966a1f99262 | Triage

Sharing

General

Target

4db4219896b4aae40bfbf9d91b44a4ca24301516476206e9acb27966a1f99262.exe
Size

89KB
Sample

250202-s5jfjsxrdw
MD5

0260beef5734117a9359a0e799388c19
SHA1

c72042e53113fbf38c76cdd43d986058e1b95c56
SHA256

4db4219896b4aae40bfbf9d91b44a4ca24301516476206e9acb27966a1f99262
SHA512

0c5d6655f9635ab7f75760b6f99785055923a4b9a922d058195744cd1ace82a0e9843b2416ce2a98c59358e59be8c8a0e84a5eecd5735ed09fe90eca025f5d6d
SSDEEP

1536:I9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxAM:I9o6fK2XqXQwhnHlqQo8LvyM

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  4db4219896b4aae40bfbf9d91b44a4ca24301516476206e9acb27966a1f99262.exe
- Size
  
  89KB
- MD5
  
  0260beef5734117a9359a0e799388c19
- SHA1
  
  c72042e53113fbf38c76cdd43d986058e1b95c56
- SHA256
  
  4db4219896b4aae40bfbf9d91b44a4ca24301516476206e9acb27966a1f99262
- SHA512
  
  0c5d6655f9635ab7f75760b6f99785055923a4b9a922d058195744cd1ace82a0e9843b2416ce2a98c59358e59be8c8a0e84a5eecd5735ed09fe90eca025f5d6d
- SSDEEP
  
  1536:I9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxAM:I9o6fK2XqXQwhnHlqQo8LvyM
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2