tinba | 82464d9fb3bed08e6e7830e35f75d9a90cff7af8a571cd57a5e3452551d7f0f4 | Triage

Sharing

General

Target

82464d9fb3bed08e6e7830e35f75d9a90cff7af8a571cd57a5e3452551d7f0f4N
Size

237KB
Sample

240930-f6be4stgqa
MD5

02e1bd854e3d6c691e298061c979e760
SHA1

a1adb9e16bd5de578c11db75982f44611f9eaf29
SHA256

82464d9fb3bed08e6e7830e35f75d9a90cff7af8a571cd57a5e3452551d7f0f4
SHA512

bbe4bff1bf9c7b7063158d741c865627d8e00d2cf5dc5fd028c10e5701528b1e0a74170c51726d17199993dcf3b37bda3aa6e361bfe2d9fc2a02e726a71ef084
SSDEEP

6144:IA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:IATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  82464d9fb3bed08e6e7830e35f75d9a90cff7af8a571cd57a5e3452551d7f0f4N
- Size
  
  237KB
- MD5
  
  02e1bd854e3d6c691e298061c979e760
- SHA1
  
  a1adb9e16bd5de578c11db75982f44611f9eaf29
- SHA256
  
  82464d9fb3bed08e6e7830e35f75d9a90cff7af8a571cd57a5e3452551d7f0f4
- SHA512
  
  bbe4bff1bf9c7b7063158d741c865627d8e00d2cf5dc5fd028c10e5701528b1e0a74170c51726d17199993dcf3b37bda3aa6e361bfe2d9fc2a02e726a71ef084
- SSDEEP
  
  6144:IA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:IATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2