tinba | f73965b3f1cab08f41a1911ec410c1a0811550a039eaad62363a926ba0f5692f | Triage

Sharing

General

Target

f73965b3f1cab08f41a1911ec410c1a0811550a039eaad62363a926ba0f5692fN
Size

59KB
Sample

241103-agl8essmak
MD5

929fe1ec88ab073d47bb0d7cdf44e3b0
SHA1

a67f97910e02b203275eb5d5d64623b144061b16
SHA256

f73965b3f1cab08f41a1911ec410c1a0811550a039eaad62363a926ba0f5692f
SHA512

cffb774a8c1c483f6f8beed0a9e128e7c674616d6203477d31ca1457ec5d6c722de6cf1e8e7b7ea6eb9f2d65f3463539120f25a4dac2c588ec6eb72a584d99c1
SSDEEP

768:T+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:T+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  f73965b3f1cab08f41a1911ec410c1a0811550a039eaad62363a926ba0f5692fN
- Size
  
  59KB
- MD5
  
  929fe1ec88ab073d47bb0d7cdf44e3b0
- SHA1
  
  a67f97910e02b203275eb5d5d64623b144061b16
- SHA256
  
  f73965b3f1cab08f41a1911ec410c1a0811550a039eaad62363a926ba0f5692f
- SHA512
  
  cffb774a8c1c483f6f8beed0a9e128e7c674616d6203477d31ca1457ec5d6c722de6cf1e8e7b7ea6eb9f2d65f3463539120f25a4dac2c588ec6eb72a584d99c1
- SSDEEP
  
  768:T+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:T+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan