tinba | 3ab27f53acf237a750e95ea56d5d82d55594341dd766bb7f924548b1dbdaf2e6 | Triage

Sharing

General

Target

3ab27f53acf237a750e95ea56d5d82d55594341dd766bb7f924548b1dbdaf2e6N
Size

610KB
Sample

241030-1ztnbsscqj
MD5

fbefebc15175998eea0fdfbfb9902a70
SHA1

a0bbfb414c8530c12bd0e8bc57a01ce7806816cd
SHA256

3ab27f53acf237a750e95ea56d5d82d55594341dd766bb7f924548b1dbdaf2e6
SHA512

eca34ff22850c569b361bd80b98932d20e8faa10a9604cea54cb25e90c221d454c9c330fc9f5a563676325049cdaaea489a662d7f1a9105ec6af434a9b0b0458
SSDEEP

12288:rATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:pT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3ab27f53acf237a750e95ea56d5d82d55594341dd766bb7f924548b1dbdaf2e6N
- Size
  
  610KB
- MD5
  
  fbefebc15175998eea0fdfbfb9902a70
- SHA1
  
  a0bbfb414c8530c12bd0e8bc57a01ce7806816cd
- SHA256
  
  3ab27f53acf237a750e95ea56d5d82d55594341dd766bb7f924548b1dbdaf2e6
- SHA512
  
  eca34ff22850c569b361bd80b98932d20e8faa10a9604cea54cb25e90c221d454c9c330fc9f5a563676325049cdaaea489a662d7f1a9105ec6af434a9b0b0458
- SSDEEP
  
  12288:rATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:pT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2