tinba | e0435141c6a05631ca54de7266783f556bb0171703e5ce2ea5af26c5ec4ffe7c | Triage

Sharing

General

Target

e0435141c6a05631ca54de7266783f556bb0171703e5ce2ea5af26c5ec4ffe7cN
Size

59KB
Sample

241027-edsy1s1lbr
MD5

5d2ac99cd39b389ff98ad74d77d22fe0
SHA1

d45fedbd94ebfbbe875ebb8821e88ab06f12aac3
SHA256

e0435141c6a05631ca54de7266783f556bb0171703e5ce2ea5af26c5ec4ffe7c
SHA512

a9a93d5fb5ef1ef754a4380243529c8d4796d79f67e8b463c0f2ee526057703ef9e3196f8539e4919731ca3a40a3cc1f973503cbbbc7909e9c8bcf8ebc8b4a03
SSDEEP

768:X+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:X+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  e0435141c6a05631ca54de7266783f556bb0171703e5ce2ea5af26c5ec4ffe7cN
- Size
  
  59KB
- MD5
  
  5d2ac99cd39b389ff98ad74d77d22fe0
- SHA1
  
  d45fedbd94ebfbbe875ebb8821e88ab06f12aac3
- SHA256
  
  e0435141c6a05631ca54de7266783f556bb0171703e5ce2ea5af26c5ec4ffe7c
- SHA512
  
  a9a93d5fb5ef1ef754a4380243529c8d4796d79f67e8b463c0f2ee526057703ef9e3196f8539e4919731ca3a40a3cc1f973503cbbbc7909e9c8bcf8ebc8b4a03
- SSDEEP
  
  768:X+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:X+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan