tinba | f0651ddfc0e0f71cd0c77e82bc63f86a5253385c06ecd390c400bd1770e21787 | Triage

Sharing

General

Target

f0651ddfc0e0f71cd0c77e82bc63f86a5253385c06ecd390c400bd1770e21787
Size

204KB
Sample

210513-6wggxxw9b2
MD5

b8eb55d872e3a6dd64af68af074a0bad
SHA1

92fb042b52a0781110cd32eb959e2f5da1e36102
SHA256

f0651ddfc0e0f71cd0c77e82bc63f86a5253385c06ecd390c400bd1770e21787
SHA512

057b7a4f3bec6d33530004c78d7e26fc79ee6cc7e7cfb08a15ee7b2f903d87f82d19f8638850932c1b09e7045b60495cc63b69a1c8a2f7139f93bbae4c7d28b7

Score

10^/10

tinba banker persistence trojan

Malware Config

Targets

- Target
  
  f0651ddfc0e0f71cd0c77e82bc63f86a5253385c06ecd390c400bd1770e21787
- Size
  
  204KB
- MD5
  
  b8eb55d872e3a6dd64af68af074a0bad
- SHA1
  
  92fb042b52a0781110cd32eb959e2f5da1e36102
- SHA256
  
  f0651ddfc0e0f71cd0c77e82bc63f86a5253385c06ecd390c400bd1770e21787
- SHA512
  
  057b7a4f3bec6d33530004c78d7e26fc79ee6cc7e7cfb08a15ee7b2f903d87f82d19f8638850932c1b09e7045b60495cc63b69a1c8a2f7139f93bbae4c7d28b7
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2

tinbabankerpersistencetrojan