tinba | 2e7bf5feeba0bcf0488557aa63e6d1ad8614e0054dbcd9afa57f94592683a6e1 | Triage

Sharing

General

Target

2e7bf5feeba0bcf0488557aa63e6d1ad8614e0054dbcd9afa57f94592683a6e1
Size

225KB
Sample

241216-znevcs1kdq
MD5

bd4f7a6626e821ef9152b00eb6b70273
SHA1

90d6d6d2961b1e8428b7f100d84d52c452934f31
SHA256

2e7bf5feeba0bcf0488557aa63e6d1ad8614e0054dbcd9afa57f94592683a6e1
SHA512

7960f8a331f4ac5c9d40052623416ceea1fb9808f260394aeaf81de15c357ade34cdaaa2a3b2a308d7df69072623becc074d8922ebc85228eb396e0f788b889a
SSDEEP

6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  2e7bf5feeba0bcf0488557aa63e6d1ad8614e0054dbcd9afa57f94592683a6e1
- Size
  
  225KB
- MD5
  
  bd4f7a6626e821ef9152b00eb6b70273
- SHA1
  
  90d6d6d2961b1e8428b7f100d84d52c452934f31
- SHA256
  
  2e7bf5feeba0bcf0488557aa63e6d1ad8614e0054dbcd9afa57f94592683a6e1
- SHA512
  
  7960f8a331f4ac5c9d40052623416ceea1fb9808f260394aeaf81de15c357ade34cdaaa2a3b2a308d7df69072623becc074d8922ebc85228eb396e0f788b889a
- SSDEEP
  
  6144:AA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:AATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2