tinba | 7e14c50c886e16a0b1dd812f173446bf652a1962a1b983c5ff0167cbe9441057 | Triage

Sharing

General

Target

7e14c50c886e16a0b1dd812f173446bf652a1962a1b983c5ff0167cbe9441057N.exe
Size

90KB
Sample

250225-evsdtatns9
MD5

aff6da8e88b9d54f27d60463bcbdc500
SHA1

62c3f8db60b02fa081ee41b68f3af7892c80f1d6
SHA256

7e14c50c886e16a0b1dd812f173446bf652a1962a1b983c5ff0167cbe9441057
SHA512

43956bff7e340eb1d905068948bdd454afee69b2f5fb41c7fa475a910fcebbd6166bfe034655574fd1c006ba24a9cfddbb2dcdaa75776254ba39ad6662a8599d
SSDEEP

1536:gz44CpRkr9DXhHf3aOd/56RrZ7qjh3rmKPNY+o2:gzvokZR/KM/y8jZqMNY/2

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7e14c50c886e16a0b1dd812f173446bf652a1962a1b983c5ff0167cbe9441057N.exe
- Size
  
  90KB
- MD5
  
  aff6da8e88b9d54f27d60463bcbdc500
- SHA1
  
  62c3f8db60b02fa081ee41b68f3af7892c80f1d6
- SHA256
  
  7e14c50c886e16a0b1dd812f173446bf652a1962a1b983c5ff0167cbe9441057
- SHA512
  
  43956bff7e340eb1d905068948bdd454afee69b2f5fb41c7fa475a910fcebbd6166bfe034655574fd1c006ba24a9cfddbb2dcdaa75776254ba39ad6662a8599d
- SSDEEP
  
  1536:gz44CpRkr9DXhHf3aOd/56RrZ7qjh3rmKPNY+o2:gzvokZR/KM/y8jZqMNY/2
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan