tinba | 02978a8633bdf61ac1c2b1020c307dc01462a5fe496fe870794409a741061139 | Triage

Sharing

General

Target

02978a8633bdf61ac1c2b1020c307dc01462a5fe496fe870794409a741061139
Size

237KB
Sample

241125-xs9jesxran
MD5

049c24acc07e34abd526951a39186734
SHA1

e80b15c57be9844f2838873d75b2006a75b88e80
SHA256

02978a8633bdf61ac1c2b1020c307dc01462a5fe496fe870794409a741061139
SHA512

be0bcba25d07386ba31f8447ab16c431e6d4e6a605be7ad7cb58fa0cee02df4bf19a3b34a6e61760c56a35a14906bb365628ae9910b7cda1e2a99243a0e703cd
SSDEEP

6144:+A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:+ATuTAnKGwUAWVycQqgj

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  02978a8633bdf61ac1c2b1020c307dc01462a5fe496fe870794409a741061139
- Size
  
  237KB
- MD5
  
  049c24acc07e34abd526951a39186734
- SHA1
  
  e80b15c57be9844f2838873d75b2006a75b88e80
- SHA256
  
  02978a8633bdf61ac1c2b1020c307dc01462a5fe496fe870794409a741061139
- SHA512
  
  be0bcba25d07386ba31f8447ab16c431e6d4e6a605be7ad7cb58fa0cee02df4bf19a3b34a6e61760c56a35a14906bb365628ae9910b7cda1e2a99243a0e703cd
- SSDEEP
  
  6144:+A2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYQ:+ATuTAnKGwUAWVycQqgj
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2