tinba | 318c7d21ff7e4b84a3049939a1cdc111b79104119bc72c7bc898b8b507e88123 | Triage

Sharing

General

Target

318c7d21ff7e4b84a3049939a1cdc111b79104119bc72c7bc898b8b507e88123.exe
Size

52KB
Sample

241124-3g43fs1pgp
MD5

9a6b10c292d6c1d25128ff74b5e4c427
SHA1

070711ca7ac579a675bdb196cab157ed9f49a384
SHA256

318c7d21ff7e4b84a3049939a1cdc111b79104119bc72c7bc898b8b507e88123
SHA512

6b9f6ee174eed5db8509aa3fa8a087bfa51f591f4fb0dd2269ed4a7d2ca1cd3b9bb44ff88873c9c3109403cf114cf615224886db0b5cc438f87280d4a7e6af48
SSDEEP

768:IvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq9:4mZNZUXeQXFhS6sM3prUSGg7O1d9J+

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  318c7d21ff7e4b84a3049939a1cdc111b79104119bc72c7bc898b8b507e88123.exe
- Size
  
  52KB
- MD5
  
  9a6b10c292d6c1d25128ff74b5e4c427
- SHA1
  
  070711ca7ac579a675bdb196cab157ed9f49a384
- SHA256
  
  318c7d21ff7e4b84a3049939a1cdc111b79104119bc72c7bc898b8b507e88123
- SHA512
  
  6b9f6ee174eed5db8509aa3fa8a087bfa51f591f4fb0dd2269ed4a7d2ca1cd3b9bb44ff88873c9c3109403cf114cf615224886db0b5cc438f87280d4a7e6af48
- SSDEEP
  
  768:IvC6RMtZNZUXeb4fXDR2JVDDISp8m7DM3pIg4LqTTUUnGg7O1/l9Jq9:4mZNZUXeQXFhS6sM3prUSGg7O1d9J+
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2

tinbabankerdiscoverypersistencetrojan