tinba | 063ecabc71c1133d62d341d11561510a139afc06e3f7d978c9c1f9bec79affc7 | Triage

Sharing

General

Target

063ecabc71c1133d62d341d11561510a139afc06e3f7d978c9c1f9bec79affc7
Size

89KB
Sample

240605-wyjdradh81
MD5

ba625bf986724d1572ff64a4fd4fd915
SHA1

47f51753bc27dc1b9e0bf26186a0f8cb9c5ca00e
SHA256

063ecabc71c1133d62d341d11561510a139afc06e3f7d978c9c1f9bec79affc7
SHA512

0073d689336be20bb77209421dbc1d8803615cf80c54f2bedd2c21b203f1a22d2ef130512e630cf165f47452b5e3557e3c2180a204d6482ffffabb9aaffa0f4b
SSDEEP

1536:g9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:g9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker persistence trojan

Malware Config

Targets

- Target
  
  063ecabc71c1133d62d341d11561510a139afc06e3f7d978c9c1f9bec79affc7
- Size
  
  89KB
- MD5
  
  ba625bf986724d1572ff64a4fd4fd915
- SHA1
  
  47f51753bc27dc1b9e0bf26186a0f8cb9c5ca00e
- SHA256
  
  063ecabc71c1133d62d341d11561510a139afc06e3f7d978c9c1f9bec79affc7
- SHA512
  
  0073d689336be20bb77209421dbc1d8803615cf80c54f2bedd2c21b203f1a22d2ef130512e630cf165f47452b5e3557e3c2180a204d6482ffffabb9aaffa0f4b
- SSDEEP
  
  1536:g9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:g9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

tinbabankerpersistencetrojan

behavioral2