tinba | d779e23fd0cd8736dcc7699e36bcfb59327efab6102604826ffbe4d5f80c70af | Triage

Sharing

General

Target

d779e23fd0cd8736dcc7699e36bcfb59327efab6102604826ffbe4d5f80c70af
Size

225KB
Sample

240902-e45qha1gnp
MD5

3776eace3627d8bcfd99c9c8795701fb
SHA1

826036ef62455bae7ae7c9056ff2b275dd7eaa92
SHA256

d779e23fd0cd8736dcc7699e36bcfb59327efab6102604826ffbe4d5f80c70af
SHA512

e05557d6ba3edfbdd61711a9bd8d5abd8641b74077eaae16c4c38539c78926eb22711cf1552e5a5bff09112ca8f2d198892f42deb7a963b8e13d18f548015cd2
SSDEEP

6144:nA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:nATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  d779e23fd0cd8736dcc7699e36bcfb59327efab6102604826ffbe4d5f80c70af
- Size
  
  225KB
- MD5
  
  3776eace3627d8bcfd99c9c8795701fb
- SHA1
  
  826036ef62455bae7ae7c9056ff2b275dd7eaa92
- SHA256
  
  d779e23fd0cd8736dcc7699e36bcfb59327efab6102604826ffbe4d5f80c70af
- SHA512
  
  e05557d6ba3edfbdd61711a9bd8d5abd8641b74077eaae16c4c38539c78926eb22711cf1552e5a5bff09112ca8f2d198892f42deb7a963b8e13d18f548015cd2
- SSDEEP
  
  6144:nA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:nATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2