tinba | 71118f1120353a76263434044b151595319a72c7df3a64b6da19ddb7e9f2b33a | Triage

Sharing

General

Target

71118f1120353a76263434044b151595319a72c7df3a64b6da19ddb7e9f2b33aN.exe
Size

52KB
Sample

250204-24dcksymer
MD5

47039deb96b6294554340802a7ae9390
SHA1

e28f7ba0ba317b42b0f78f78c1f84d5dbb9cf08d
SHA256

71118f1120353a76263434044b151595319a72c7df3a64b6da19ddb7e9f2b33a
SHA512

cc9b6eed98721ce7e9f69064c88c3e1a128c950677868763217f85bb8c73738cd36aa35c943ba82f63b3067bfb494a08e7ccf2d329f689c08292d3cc913972ec
SSDEEP

768:wFJINdDJbjHM+XczWsTtNtS4FOycALGBTg8WLxHUUnGgVPs6FjJl9Jh:OI31jJsJNNr6boUSGgVPsWL9Jh

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  71118f1120353a76263434044b151595319a72c7df3a64b6da19ddb7e9f2b33aN.exe
- Size
  
  52KB
- MD5
  
  47039deb96b6294554340802a7ae9390
- SHA1
  
  e28f7ba0ba317b42b0f78f78c1f84d5dbb9cf08d
- SHA256
  
  71118f1120353a76263434044b151595319a72c7df3a64b6da19ddb7e9f2b33a
- SHA512
  
  cc9b6eed98721ce7e9f69064c88c3e1a128c950677868763217f85bb8c73738cd36aa35c943ba82f63b3067bfb494a08e7ccf2d329f689c08292d3cc913972ec
- SSDEEP
  
  768:wFJINdDJbjHM+XczWsTtNtS4FOycALGBTg8WLxHUUnGgVPs6FjJl9Jh:OI31jJsJNNr6boUSGgVPsWL9Jh
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan