tinba | ce07d647a2842d78d17b84e411c252fdcad83817b6e6c072342baf50420119f6 | Triage

Sharing

General

Target

ce07d647a2842d78d17b84e411c252fdcad83817b6e6c072342baf50420119f6N
Size

59KB
Sample

241109-l8zhlsseqd
MD5

b44145fe1f83cd571a44c14b0c9be550
SHA1

bcb29458742999630843c2d510090146f097eae3
SHA256

ce07d647a2842d78d17b84e411c252fdcad83817b6e6c072342baf50420119f6
SHA512

d5169ae71f2bec57b79d525bed8f9187d79f8981e2caca1b899ced82d9c032b664c92ed28cc2e6f6987a4f88868d909afcbc3d63400dab3817a2bec9216525fb
SSDEEP

768:/+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:/+mFM2HXKZgiFP7xIksu+XM5O9J1

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  ce07d647a2842d78d17b84e411c252fdcad83817b6e6c072342baf50420119f6N
- Size
  
  59KB
- MD5
  
  b44145fe1f83cd571a44c14b0c9be550
- SHA1
  
  bcb29458742999630843c2d510090146f097eae3
- SHA256
  
  ce07d647a2842d78d17b84e411c252fdcad83817b6e6c072342baf50420119f6
- SHA512
  
  d5169ae71f2bec57b79d525bed8f9187d79f8981e2caca1b899ced82d9c032b664c92ed28cc2e6f6987a4f88868d909afcbc3d63400dab3817a2bec9216525fb
- SSDEEP
  
  768:/+6p+OMlgGMCWhfDzU7f7JDgiFP7xI57+sByZ+XsfXpwtGc9J1:/+mFM2HXKZgiFP7xIksu+XM5O9J1
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan