tinba | 3a012bd8406d27fdc756141b8124ab194dc57dba6ce0143ba1f2b9380256e41b | Triage

Sharing

General

Target

3a012bd8406d27fdc756141b8124ab194dc57dba6ce0143ba1f2b9380256e41bN
Size

59KB
Sample

241102-vcbw4syrez
MD5

ab67e00a84dfd14838487a54bd3a7390
SHA1

1977ee27040b0995beb6ed813659daec8531c2bd
SHA256

3a012bd8406d27fdc756141b8124ab194dc57dba6ce0143ba1f2b9380256e41b
SHA512

1e8e18af7da3ede91f491a2980dc98a4d2f761be832e1f0a1976acc059fc2bd8c95583f609e4cf0d33e033ca2e90180172d9694900456fa1b9ea689ee51d0a3d
SSDEEP

768:4+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:4+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3a012bd8406d27fdc756141b8124ab194dc57dba6ce0143ba1f2b9380256e41bN
- Size
  
  59KB
- MD5
  
  ab67e00a84dfd14838487a54bd3a7390
- SHA1
  
  1977ee27040b0995beb6ed813659daec8531c2bd
- SHA256
  
  3a012bd8406d27fdc756141b8124ab194dc57dba6ce0143ba1f2b9380256e41b
- SHA512
  
  1e8e18af7da3ede91f491a2980dc98a4d2f761be832e1f0a1976acc059fc2bd8c95583f609e4cf0d33e033ca2e90180172d9694900456fa1b9ea689ee51d0a3d
- SSDEEP
  
  768:4+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:4+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan