tinba | 300ef90cbde8df782048a8585b86eda9549c2eea3def8ae96bf9a5e0cb186a0d | Triage

Sharing

General

Target

300ef90cbde8df782048a8585b86eda9549c2eea3def8ae96bf9a5e0cb186a0dN
Size

106KB
Sample

241103-n1zvhstbmd
MD5

375004985301fcc97684a54b77cafce0
SHA1

98a6f18fb029beca2718201b17d0c18a49ef013a
SHA256

300ef90cbde8df782048a8585b86eda9549c2eea3def8ae96bf9a5e0cb186a0d
SHA512

31e3f3984e9559dfa25e7104ffb09637a8b6a0d4a95d469e9d16cdfa0a6b1df0c9a158f57c77defd89281067efe7b80cd66a9c724e7f82d931ef6ca5714eee5f
SSDEEP

768:h+6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:h+mFM2QXtZgi9Iksu+XM57ipeq9JA

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  300ef90cbde8df782048a8585b86eda9549c2eea3def8ae96bf9a5e0cb186a0dN
- Size
  
  106KB
- MD5
  
  375004985301fcc97684a54b77cafce0
- SHA1
  
  98a6f18fb029beca2718201b17d0c18a49ef013a
- SHA256
  
  300ef90cbde8df782048a8585b86eda9549c2eea3def8ae96bf9a5e0cb186a0d
- SHA512
  
  31e3f3984e9559dfa25e7104ffb09637a8b6a0d4a95d469e9d16cdfa0a6b1df0c9a158f57c77defd89281067efe7b80cd66a9c724e7f82d931ef6ca5714eee5f
- SSDEEP
  
  768:h+6p+OMlgGXCWhfDzU7f0JDgi9I57+sByZ+XsfXpwtG9ipelU9JA:h+mFM2QXtZgi9Iksu+XM57ipeq9JA
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan