tinba | f1c14694b762f7cf74041ff9ab4f831da9550b385c652b94b06bfb5a5ac5375f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c7ee2ec3f0bd3cf105363f90b6f3961
Size

1024KB
Sample

231231-hr5fraddh2
MD5

2c7ee2ec3f0bd3cf105363f90b6f3961
SHA1

7b3b95b10d4afe29eadd776f81d4696e8bf0e9ab
SHA256

f1c14694b762f7cf74041ff9ab4f831da9550b385c652b94b06bfb5a5ac5375f
SHA512

0f48c30f9856bfc335ce144c2dad8c164b1ca76ed061ccbfd80ef4de001849e1881464db1825ebb7813a154e78cdcf6d69cea9aa2b2724727ae1e06e03a0b30a
SSDEEP

1536:ZKMxrpM6t6n4+DLGgh3aOe5idSQmwzqnwqjhurmKFct:Ie64+XGEKFRxwGjAqGct

Score

10^/10

tinba banker persistence trojan

Malware Config

Targets

- Target
  
  2c7ee2ec3f0bd3cf105363f90b6f3961
- Size
  
  1024KB
- MD5
  
  2c7ee2ec3f0bd3cf105363f90b6f3961
- SHA1
  
  7b3b95b10d4afe29eadd776f81d4696e8bf0e9ab
- SHA256
  
  f1c14694b762f7cf74041ff9ab4f831da9550b385c652b94b06bfb5a5ac5375f
- SHA512
  
  0f48c30f9856bfc335ce144c2dad8c164b1ca76ed061ccbfd80ef4de001849e1881464db1825ebb7813a154e78cdcf6d69cea9aa2b2724727ae1e06e03a0b30a
- SSDEEP
  
  1536:ZKMxrpM6t6n4+DLGgh3aOe5idSQmwzqnwqjhurmKFct:Ie64+XGEKFRxwGjAqGct
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2