tinba | 7680fc92e7ecf99fc3b5b699f6195dd85c22293af233e6f6bf8972895409fc03 | Triage

Sharing

General

Target

7680fc92e7ecf99fc3b5b699f6195dd85c22293af233e6f6bf8972895409fc03N
Size

98KB
Sample

241009-jktw4szaqe
MD5

03a87b535043242fe982f95a8d7aa040
SHA1

c29119163c409182a45029422acdb0d1c2389400
SHA256

7680fc92e7ecf99fc3b5b699f6195dd85c22293af233e6f6bf8972895409fc03
SHA512

6139a1b66f140fb5643f41b4c4761fa76fe561906e5cd961161b9c5e9dc3c3e391c3b065859ab56224c0f84794d48c2a558f1da7e2d2e25c83f844c2817cfdac
SSDEEP

768:Q+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:Q+mFM2HXKZgi9Iksu+XM57ipeq9JF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7680fc92e7ecf99fc3b5b699f6195dd85c22293af233e6f6bf8972895409fc03N
- Size
  
  98KB
- MD5
  
  03a87b535043242fe982f95a8d7aa040
- SHA1
  
  c29119163c409182a45029422acdb0d1c2389400
- SHA256
  
  7680fc92e7ecf99fc3b5b699f6195dd85c22293af233e6f6bf8972895409fc03
- SHA512
  
  6139a1b66f140fb5643f41b4c4761fa76fe561906e5cd961161b9c5e9dc3c3e391c3b065859ab56224c0f84794d48c2a558f1da7e2d2e25c83f844c2817cfdac
- SSDEEP
  
  768:Q+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:Q+mFM2HXKZgi9Iksu+XM57ipeq9JF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan