tinba | 70005fd5cadfbadc32e3953ef063837742928a63760aa9ef5e1b8716ebba6804 | Triage

Sharing

General

Target

70005fd5cadfbadc32e3953ef063837742928a63760aa9ef5e1b8716ebba6804
Size

49KB
Sample

250208-by4dpsxrhs
MD5

9b831b37b23e9575ed171136b5dbcd46
SHA1

bc4ea9dcc31f1d8c6455a9d0c9a6f5bbaabb411b
SHA256

70005fd5cadfbadc32e3953ef063837742928a63760aa9ef5e1b8716ebba6804
SHA512

4792a0c260adcfa0725736c1625d9e371936693f93eba8db13c08bb7969a7efe9c0a7263d4131a2d60eb365f6d2820b498f515c48e94b68ef4ff9385a1f3d586
SSDEEP

1536:YOBLXNqgzf2v6b6NkXklZlogHGe9eBXW:YYLduv6OqXIlogmjW

Score

10^/10

tinba banker discovery persistence trojan upx

Malware Config

Targets

- Target
  
  70005fd5cadfbadc32e3953ef063837742928a63760aa9ef5e1b8716ebba6804
- Size
  
  49KB
- MD5
  
  9b831b37b23e9575ed171136b5dbcd46
- SHA1
  
  bc4ea9dcc31f1d8c6455a9d0c9a6f5bbaabb411b
- SHA256
  
  70005fd5cadfbadc32e3953ef063837742928a63760aa9ef5e1b8716ebba6804
- SHA512
  
  4792a0c260adcfa0725736c1625d9e371936693f93eba8db13c08bb7969a7efe9c0a7263d4131a2d60eb365f6d2820b498f515c48e94b68ef4ff9385a1f3d586
- SSDEEP
  
  1536:YOBLXNqgzf2v6b6NkXklZlogHGe9eBXW:YYLduv6OqXIlogmjW
Score

10^/10

tinba banker discovery persistence trojan upx
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Downloads MZ/PE file
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojanupx

behavioral2

tinbabankerdiscoverypersistencetrojanupx