tinba | 7fd7521c7eb1afe25a4732c9794a908b5fe0ef30495d068588448a560456af84 | Triage

Sharing

General

Target

7fd7521c7eb1afe25a4732c9794a908b5fe0ef30495d068588448a560456af84N
Size

225KB
Sample

241027-ggzl3sspcx
MD5

ba5293c1c050683e3c463793e6d41c20
SHA1

d5af53ce1019b9a01518c708059d7d59e3818caf
SHA256

7fd7521c7eb1afe25a4732c9794a908b5fe0ef30495d068588448a560456af84
SHA512

b9c8cd1e82e63ddfebcc7110b6f38fa5f472e4c1b87aaaf00c0d8e5d9e17639e636b0a88ed7c4b8edaceec1ea06003766db49eb94d1980bb648a1dc68d758e6e
SSDEEP

6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:vATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7fd7521c7eb1afe25a4732c9794a908b5fe0ef30495d068588448a560456af84N
- Size
  
  225KB
- MD5
  
  ba5293c1c050683e3c463793e6d41c20
- SHA1
  
  d5af53ce1019b9a01518c708059d7d59e3818caf
- SHA256
  
  7fd7521c7eb1afe25a4732c9794a908b5fe0ef30495d068588448a560456af84
- SHA512
  
  b9c8cd1e82e63ddfebcc7110b6f38fa5f472e4c1b87aaaf00c0d8e5d9e17639e636b0a88ed7c4b8edaceec1ea06003766db49eb94d1980bb648a1dc68d758e6e
- SSDEEP
  
  6144:vA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:vATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2