tinba | 54af50c210ed0ce121c36f4cb99f35ba623b2dfc3e7b2ec9400d85945d0347a8 | Triage

Sharing

General

Target

54af50c210ed0ce121c36f4cb99f35ba623b2dfc3e7b2ec9400d85945d0347a8N
Size

98KB
Sample

241101-len5sazama
MD5

9b51fb8719222c80e96d06dfa0a6aec0
SHA1

5e4535b3bd25ba61b391ee814ecd84fdd59eab22
SHA256

54af50c210ed0ce121c36f4cb99f35ba623b2dfc3e7b2ec9400d85945d0347a8
SHA512

66b4ee8114be57f4064755ea0a23bf7eebb4d0db1902dd8ccdd5c8a314808e126466f9bf2abfcd93fd6b15fcf582aa08d4de4b02e317bb740d6f77b4778cdb57
SSDEEP

768:N+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:N+mFM2HXKZgi9Iksu+XM57ipeq9JF

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  54af50c210ed0ce121c36f4cb99f35ba623b2dfc3e7b2ec9400d85945d0347a8N
- Size
  
  98KB
- MD5
  
  9b51fb8719222c80e96d06dfa0a6aec0
- SHA1
  
  5e4535b3bd25ba61b391ee814ecd84fdd59eab22
- SHA256
  
  54af50c210ed0ce121c36f4cb99f35ba623b2dfc3e7b2ec9400d85945d0347a8
- SHA512
  
  66b4ee8114be57f4064755ea0a23bf7eebb4d0db1902dd8ccdd5c8a314808e126466f9bf2abfcd93fd6b15fcf582aa08d4de4b02e317bb740d6f77b4778cdb57
- SSDEEP
  
  768:N+6p+OMlgGMCWhfDzU7f7JDgi9I57+sByZ+XsfXpwtG9ipelU9JF:N+mFM2HXKZgi9Iksu+XM57ipeq9JF
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan