tinba | a1da432fce5e9fd6f7e9bb8ccb2cf428fe969a1e48add67ccb9a5f4d37a56652 | Triage

Sharing

General

Target

a1da432fce5e9fd6f7e9bb8ccb2cf428fe969a1e48add67ccb9a5f4d37a56652N.exe
Size

225KB
Sample

250217-e2b1eazqbs
MD5

e508cb45e3164db9e506cfccb72be920
SHA1

ab62d8cd34ebc2f4ea4ee746745a65696655cc5a
SHA256

a1da432fce5e9fd6f7e9bb8ccb2cf428fe969a1e48add67ccb9a5f4d37a56652
SHA512

7e6a50ee6e40e1407ee42b4070c63339398c7133341c3706bbf66c0042218f0d2b38437a921bfab3ec5bd88e02f3a3f040827796f1983197c82e59f8175fffe6
SSDEEP

6144:oA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:oATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  a1da432fce5e9fd6f7e9bb8ccb2cf428fe969a1e48add67ccb9a5f4d37a56652N.exe
- Size
  
  225KB
- MD5
  
  e508cb45e3164db9e506cfccb72be920
- SHA1
  
  ab62d8cd34ebc2f4ea4ee746745a65696655cc5a
- SHA256
  
  a1da432fce5e9fd6f7e9bb8ccb2cf428fe969a1e48add67ccb9a5f4d37a56652
- SHA512
  
  7e6a50ee6e40e1407ee42b4070c63339398c7133341c3706bbf66c0042218f0d2b38437a921bfab3ec5bd88e02f3a3f040827796f1983197c82e59f8175fffe6
- SSDEEP
  
  6144:oA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:oATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Downloads MZ/PE file
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2