tinba | da3dbb8df9038dc8b2613a9b6d3df4adf4b2c21a523a38a33d6c51a8faf86415 | Triage

Sharing

General

Target

da3dbb8df9038dc8b2613a9b6d3df4adf4b2c21a523a38a33d6c51a8faf86415
Size

610KB
Sample

241020-c482tatgrg
MD5

b577940137d52af3209cbef414530282
SHA1

042fc61c17bd68c913295ede401b053ce00bcfd3
SHA256

da3dbb8df9038dc8b2613a9b6d3df4adf4b2c21a523a38a33d6c51a8faf86415
SHA512

40773e234b56d59f2b3b2911252957389d97de3b8d6aa9f3a3c6f052585cf383d474c6c777419f4c317e590c42746f2f7a93966ace4200339aa849c83a1750e7
SSDEEP

12288:dATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:HT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  da3dbb8df9038dc8b2613a9b6d3df4adf4b2c21a523a38a33d6c51a8faf86415
- Size
  
  610KB
- MD5
  
  b577940137d52af3209cbef414530282
- SHA1
  
  042fc61c17bd68c913295ede401b053ce00bcfd3
- SHA256
  
  da3dbb8df9038dc8b2613a9b6d3df4adf4b2c21a523a38a33d6c51a8faf86415
- SHA512
  
  40773e234b56d59f2b3b2911252957389d97de3b8d6aa9f3a3c6f052585cf383d474c6c777419f4c317e590c42746f2f7a93966ace4200339aa849c83a1750e7
- SSDEEP
  
  12288:dATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:HT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2