tinba | 07a6256e37972e4b5b9409a7c17215b5693f8ebfce8987bcb5e0ce4fd4394e4f | Triage

Sharing

General

Target

07a6256e37972e4b5b9409a7c17215b5693f8ebfce8987bcb5e0ce4fd4394e4f
Size

225KB
Sample

240826-w51llsydrf
MD5

009fe51f274be202c036595895c6060a
SHA1

0e52d6c04d5bb2cccd28ae074dd491ed7834fe18
SHA256

07a6256e37972e4b5b9409a7c17215b5693f8ebfce8987bcb5e0ce4fd4394e4f
SHA512

8d5a7e87a1cbbf2a94bf03feee04ac5abbdaec0c32569cc1d0dfd6190c990363a4bac64460142f82fc43aeb9875435129b7214bfa616e576453225c184858056
SSDEEP

6144:cA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:cATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  07a6256e37972e4b5b9409a7c17215b5693f8ebfce8987bcb5e0ce4fd4394e4f
- Size
  
  225KB
- MD5
  
  009fe51f274be202c036595895c6060a
- SHA1
  
  0e52d6c04d5bb2cccd28ae074dd491ed7834fe18
- SHA256
  
  07a6256e37972e4b5b9409a7c17215b5693f8ebfce8987bcb5e0ce4fd4394e4f
- SHA512
  
  8d5a7e87a1cbbf2a94bf03feee04ac5abbdaec0c32569cc1d0dfd6190c990363a4bac64460142f82fc43aeb9875435129b7214bfa616e576453225c184858056
- SSDEEP
  
  6144:cA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:cATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2