tinba | 3b15c5f86a281373a69f45dfadc7b58b5af7e98785721424748677526726c9ed | Triage

Sharing

General

Target

3b15c5f86a281373a69f45dfadc7b58b5af7e98785721424748677526726c9edN
Size

98KB
Sample

241028-qb8r8sxpfz
MD5

c5844379faae859feb79a9f1d2122d10
SHA1

81e085ae598473ebcc6325cb2192f0d30d91c1bd
SHA256

3b15c5f86a281373a69f45dfadc7b58b5af7e98785721424748677526726c9ed
SHA512

16a4c6d2f34008e951209169d550cf068dfa22850bfe221cb40dcdf4cf295fe02bf1a96c22c9515267b57b6b777cefc00fc3ddf49cba26aad162051bec84b476
SSDEEP

768:c+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:c+mFM2HXKZgi9Iksu+XM57ipeq9JF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3b15c5f86a281373a69f45dfadc7b58b5af7e98785721424748677526726c9edN
- Size
  
  98KB
- MD5
  
  c5844379faae859feb79a9f1d2122d10
- SHA1
  
  81e085ae598473ebcc6325cb2192f0d30d91c1bd
- SHA256
  
  3b15c5f86a281373a69f45dfadc7b58b5af7e98785721424748677526726c9ed
- SHA512
  
  16a4c6d2f34008e951209169d550cf068dfa22850bfe221cb40dcdf4cf295fe02bf1a96c22c9515267b57b6b777cefc00fc3ddf49cba26aad162051bec84b476
- SSDEEP
  
  768:c+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:c+mFM2HXKZgi9Iksu+XM57ipeq9JF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan