tinba | ad984b54f9ed96c910ec039efeaa6eb9d80f84b756756317fa49c3c81f444db2 | Triage

Sharing

General

Target

ad984b54f9ed96c910ec039efeaa6eb9d80f84b756756317fa49c3c81f444db2
Size

610KB
Sample

241103-dbtbbstalj
MD5

9f19bdef237bc710e91c742acb2b6617
SHA1

05e62730d213452a22591271a34dc87d7f5cb393
SHA256

ad984b54f9ed96c910ec039efeaa6eb9d80f84b756756317fa49c3c81f444db2
SHA512

5f972738c4b7d1e646cce3735a65e6483d982c835cd265f44d29a3ccc739a8e6fafd48b2a2151807e5a17a3e1d12ecf5e064116de219b80ab3f8749c1458ae51
SSDEEP

12288:FATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:vT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ad984b54f9ed96c910ec039efeaa6eb9d80f84b756756317fa49c3c81f444db2
- Size
  
  610KB
- MD5
  
  9f19bdef237bc710e91c742acb2b6617
- SHA1
  
  05e62730d213452a22591271a34dc87d7f5cb393
- SHA256
  
  ad984b54f9ed96c910ec039efeaa6eb9d80f84b756756317fa49c3c81f444db2
- SHA512
  
  5f972738c4b7d1e646cce3735a65e6483d982c835cd265f44d29a3ccc739a8e6fafd48b2a2151807e5a17a3e1d12ecf5e064116de219b80ab3f8749c1458ae51
- SSDEEP
  
  12288:FATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:vT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2