tinba | afa145dc428359b22eb09391abc491bb4b793ade0b407242461eaa957f34ee9a | Triage

Sharing

General

Target

afa145dc428359b22eb09391abc491bb4b793ade0b407242461eaa957f34ee9a
Size

237KB
Sample

241219-cf3vwssqek
MD5

6f8fe264f940a68bd7a364c4750f7607
SHA1

25225f07c724aac5b52856189eede943ecbcf059
SHA256

afa145dc428359b22eb09391abc491bb4b793ade0b407242461eaa957f34ee9a
SHA512

39353889918052a9c327e4dee50d3a36d77f89d76bc7fe406607554ea4937bc2f7692ef83ed836382302929e556a7f61e040b36747e75bf7b99b07bbe5c4d42e
SSDEEP

6144:KA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:KATuTAnKGwUAWVycQqgr

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  afa145dc428359b22eb09391abc491bb4b793ade0b407242461eaa957f34ee9a
- Size
  
  237KB
- MD5
  
  6f8fe264f940a68bd7a364c4750f7607
- SHA1
  
  25225f07c724aac5b52856189eede943ecbcf059
- SHA256
  
  afa145dc428359b22eb09391abc491bb4b793ade0b407242461eaa957f34ee9a
- SHA512
  
  39353889918052a9c327e4dee50d3a36d77f89d76bc7fe406607554ea4937bc2f7692ef83ed836382302929e556a7f61e040b36747e75bf7b99b07bbe5c4d42e
- SSDEEP
  
  6144:KA2P27yTAnKGw0hjFhSR/W1nyAJ9v0pMtRCpYw:KATuTAnKGwUAWVycQqgr
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2