tinba | 58d41483788213329172bc46063170ea52a63521d0449dd54b336080c89585aa | Triage

Sharing

General

Target

58d41483788213329172bc46063170ea52a63521d0449dd54b336080c89585aaN
Size

225KB
Sample

241010-zpaa9s1gqp
MD5

504f2c682d74b1de833eabc28bb83140
SHA1

eae4f6d7ee0289c00a8976615751c48115a3be2c
SHA256

58d41483788213329172bc46063170ea52a63521d0449dd54b336080c89585aa
SHA512

4291dacef849c257a99cae1a1152e93424e42c5054ee50036310db3a47418bc1aecad9a7a0f5254f3fbd6466af73b7d1a7bb6f1be6175efd259ebca95a1df440
SSDEEP

6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:vATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  58d41483788213329172bc46063170ea52a63521d0449dd54b336080c89585aaN
- Size
  
  225KB
- MD5
  
  504f2c682d74b1de833eabc28bb83140
- SHA1
  
  eae4f6d7ee0289c00a8976615751c48115a3be2c
- SHA256
  
  58d41483788213329172bc46063170ea52a63521d0449dd54b336080c89585aa
- SHA512
  
  4291dacef849c257a99cae1a1152e93424e42c5054ee50036310db3a47418bc1aecad9a7a0f5254f3fbd6466af73b7d1a7bb6f1be6175efd259ebca95a1df440
- SSDEEP
  
  6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:vATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2