tinba | 45ab76a49f92152d6b7dcc0618b30ba8a6b1516db4522aa35023643e0c6f31e0 | Triage

Sharing

General

Target

45ab76a49f92152d6b7dcc0618b30ba8a6b1516db4522aa35023643e0c6f31e0N
Size

89KB
Sample

241025-r7jnnaxrgr
MD5

eb42461dd3308bab9b530ff3fca7f710
SHA1

cad0156d267822b3ed7fc5f3026de0e2bb190a00
SHA256

45ab76a49f92152d6b7dcc0618b30ba8a6b1516db4522aa35023643e0c6f31e0
SHA512

7016411a82f9f0ba8d497ae2a283e81fdedb61c884bee7fef2bd5736c444ef11303ebfea610f935454c7d5f8d429cdfa09af4802f687293ae6aa3212ddb6ce13
SSDEEP

1536:x9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:x9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  45ab76a49f92152d6b7dcc0618b30ba8a6b1516db4522aa35023643e0c6f31e0N
- Size
  
  89KB
- MD5
  
  eb42461dd3308bab9b530ff3fca7f710
- SHA1
  
  cad0156d267822b3ed7fc5f3026de0e2bb190a00
- SHA256
  
  45ab76a49f92152d6b7dcc0618b30ba8a6b1516db4522aa35023643e0c6f31e0
- SHA512
  
  7016411a82f9f0ba8d497ae2a283e81fdedb61c884bee7fef2bd5736c444ef11303ebfea610f935454c7d5f8d429cdfa09af4802f687293ae6aa3212ddb6ce13
- SSDEEP
  
  1536:x9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:x9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2