tinba | 3d463f27844f5261e098661d3d87acaa440daaf561a9de16ed14d658357d25b4 | Triage

Sharing

General

Target

3d463f27844f5261e098661d3d87acaa440daaf561a9de16ed14d658357d25b4N
Size

59KB
Sample

241031-mgxqdavlfz
MD5

3221f0a7a07ec813e0a0ab0e163e10f0
SHA1

56ce6dac0bce34afa4e56ec5b3650cd2cb5fa6e5
SHA256

3d463f27844f5261e098661d3d87acaa440daaf561a9de16ed14d658357d25b4
SHA512

946b36b8bf8cb5e3c950384c1202b19598956ec57410b6eeb7aa3a068a2c203d4aa20254c706c0fc27827ac5360707f008316d325a6c54f73c57c6847e0edf65
SSDEEP

768:a+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:a+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3d463f27844f5261e098661d3d87acaa440daaf561a9de16ed14d658357d25b4N
- Size
  
  59KB
- MD5
  
  3221f0a7a07ec813e0a0ab0e163e10f0
- SHA1
  
  56ce6dac0bce34afa4e56ec5b3650cd2cb5fa6e5
- SHA256
  
  3d463f27844f5261e098661d3d87acaa440daaf561a9de16ed14d658357d25b4
- SHA512
  
  946b36b8bf8cb5e3c950384c1202b19598956ec57410b6eeb7aa3a068a2c203d4aa20254c706c0fc27827ac5360707f008316d325a6c54f73c57c6847e0edf65
- SSDEEP
  
  768:a+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:a+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan