tinba | 3ac08bb426a3dac3d6109fd7a3bbd06aa29ec78049b3164a34036bf6221e1075 | Triage

Sharing

General

Target

3ac08bb426a3dac3d6109fd7a3bbd06aa29ec78049b3164a34036bf6221e1075N.exe
Size

225KB
Sample

250224-2vvv9ssmv7
MD5

79b20b572093f6ff96755dfc7a6c5500
SHA1

7dce20be7ec8d51aca20e69c4a4d116a91093544
SHA256

3ac08bb426a3dac3d6109fd7a3bbd06aa29ec78049b3164a34036bf6221e1075
SHA512

1863326de092d138e8b62cf7653eafa5da65edef2609ccd9d59684d20944bd7e97460165524c8aa957c6f4b70491364615d7ab51db139ccde50495c0eef5f212
SSDEEP

6144:VA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:VATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3ac08bb426a3dac3d6109fd7a3bbd06aa29ec78049b3164a34036bf6221e1075N.exe
- Size
  
  225KB
- MD5
  
  79b20b572093f6ff96755dfc7a6c5500
- SHA1
  
  7dce20be7ec8d51aca20e69c4a4d116a91093544
- SHA256
  
  3ac08bb426a3dac3d6109fd7a3bbd06aa29ec78049b3164a34036bf6221e1075
- SHA512
  
  1863326de092d138e8b62cf7653eafa5da65edef2609ccd9d59684d20944bd7e97460165524c8aa957c6f4b70491364615d7ab51db139ccde50495c0eef5f212
- SSDEEP
  
  6144:VA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:VATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2