tinba | 7383d630d34ec3fec8f84e7bfa64361e6a28f1450928111a0d9d46192efd1e8c | Triage

Sharing

General

Target

7383d630d34ec3fec8f84e7bfa64361e6a28f1450928111a0d9d46192efd1e8cN
Size

89KB
Sample

241104-dve8ta1pby
MD5

6a38a84265978ca9de6c79dd58efd4a0
SHA1

9d13459d6467135b386ade5982bf282c2e6bf170
SHA256

7383d630d34ec3fec8f84e7bfa64361e6a28f1450928111a0d9d46192efd1e8c
SHA512

bc6f583bb2c8ed9be4f1c4065a063e86ee872f3b9c14489d62422d904a16261fce070fe843c343b1d7e95d162f5d09bcab4c7118d9990054a010378e5a419e1f
SSDEEP

1536:o9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:o9o6fK2XqXQwhnHlqQo8Lvy

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  7383d630d34ec3fec8f84e7bfa64361e6a28f1450928111a0d9d46192efd1e8cN
- Size
  
  89KB
- MD5
  
  6a38a84265978ca9de6c79dd58efd4a0
- SHA1
  
  9d13459d6467135b386ade5982bf282c2e6bf170
- SHA256
  
  7383d630d34ec3fec8f84e7bfa64361e6a28f1450928111a0d9d46192efd1e8c
- SHA512
  
  bc6f583bb2c8ed9be4f1c4065a063e86ee872f3b9c14489d62422d904a16261fce070fe843c343b1d7e95d162f5d09bcab4c7118d9990054a010378e5a419e1f
- SSDEEP
  
  1536:o9o65gQK3Zm+Mt9RV5O8oQ9cXFunGm6ManhFLnBqHan6owwosTk8vxA:o9o6fK2XqXQwhnHlqQo8Lvy
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2