tinba | e1911555b30a143eccef5e1c23f6eb14281deba04914249375c8a1bda45ed1bf | Triage

Sharing

General

Target

e1911555b30a143eccef5e1c23f6eb14281deba04914249375c8a1bda45ed1bfN
Size

98KB
Sample

241022-2gt2tazdmk
MD5

0e809dbb26085309739cc67e142a1cb0
SHA1

49c0ee2bf5a06f20f5eaba6f56aad14c7088e8b0
SHA256

e1911555b30a143eccef5e1c23f6eb14281deba04914249375c8a1bda45ed1bf
SHA512

120bf947e1af6b115f9e9b1df5b57117756abd299fe2a840e471a88c8377b78ea5bd760a097e2f1aba9c9ae33f83bcc76115af5488c77233655c38811c1f4900
SSDEEP

768:j+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:j+mFM2HXKZgi9Iksu+XM57ipeq9JF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e1911555b30a143eccef5e1c23f6eb14281deba04914249375c8a1bda45ed1bfN
- Size
  
  98KB
- MD5
  
  0e809dbb26085309739cc67e142a1cb0
- SHA1
  
  49c0ee2bf5a06f20f5eaba6f56aad14c7088e8b0
- SHA256
  
  e1911555b30a143eccef5e1c23f6eb14281deba04914249375c8a1bda45ed1bf
- SHA512
  
  120bf947e1af6b115f9e9b1df5b57117756abd299fe2a840e471a88c8377b78ea5bd760a097e2f1aba9c9ae33f83bcc76115af5488c77233655c38811c1f4900
- SSDEEP
  
  768:j+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:j+mFM2HXKZgi9Iksu+XM57ipeq9JF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan