tinba | bb9c09c4bdd50ec948d70f6cef36d05a295b658d69562de4cee66265c6472670 | Triage

Sharing

General

Target

bb9c09c4bdd50ec948d70f6cef36d05a295b658d69562de4cee66265c6472670N
Size

237KB
Sample

241030-sb7ahsvjdw
MD5

07ec58f4bb7b3365dbda74d4cb40dd50
SHA1

7f0873db5d3d288c9b6b877be73a05493ccc8dc4
SHA256

bb9c09c4bdd50ec948d70f6cef36d05a295b658d69562de4cee66265c6472670
SHA512

9e4f4618648d136f380c634e287e8ef0d0daba3be9f6ff43e576d319260e9cb3d8cc585a4d0c26593673453d9e88ab97555f93cd5d39510b8a0d445ea4a9a840
SSDEEP

6144:MA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:MATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  bb9c09c4bdd50ec948d70f6cef36d05a295b658d69562de4cee66265c6472670N
- Size
  
  237KB
- MD5
  
  07ec58f4bb7b3365dbda74d4cb40dd50
- SHA1
  
  7f0873db5d3d288c9b6b877be73a05493ccc8dc4
- SHA256
  
  bb9c09c4bdd50ec948d70f6cef36d05a295b658d69562de4cee66265c6472670
- SHA512
  
  9e4f4618648d136f380c634e287e8ef0d0daba3be9f6ff43e576d319260e9cb3d8cc585a4d0c26593673453d9e88ab97555f93cd5d39510b8a0d445ea4a9a840
- SSDEEP
  
  6144:MA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:MATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2