tinba | 1be795affa547036350cec6c065b21051d8c7040c4dd2fde013d4bbc996d343b | Triage

Sharing

General

Target

1be795affa547036350cec6c065b21051d8c7040c4dd2fde013d4bbc996d343bN
Size

225KB
Sample

241110-e5fg1azckn
MD5

acf200dcd71af32e986261cadf62d400
SHA1

01fb838c997d46dffe5a3ea9eb7bc919fe6cbf83
SHA256

1be795affa547036350cec6c065b21051d8c7040c4dd2fde013d4bbc996d343b
SHA512

6e12739965897dfe5acf4578b9698deea37c426ebab70a3cd011a1af2b00a5e17965e2f8ec697e54e5f0cf0228fd4ca5593171d3fbb49f71edc9d3ae39a6cdeb
SSDEEP

6144:nA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:nATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  1be795affa547036350cec6c065b21051d8c7040c4dd2fde013d4bbc996d343bN
- Size
  
  225KB
- MD5
  
  acf200dcd71af32e986261cadf62d400
- SHA1
  
  01fb838c997d46dffe5a3ea9eb7bc919fe6cbf83
- SHA256
  
  1be795affa547036350cec6c065b21051d8c7040c4dd2fde013d4bbc996d343b
- SHA512
  
  6e12739965897dfe5acf4578b9698deea37c426ebab70a3cd011a1af2b00a5e17965e2f8ec697e54e5f0cf0228fd4ca5593171d3fbb49f71edc9d3ae39a6cdeb
- SSDEEP
  
  6144:nA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:nATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2