tinba | 3d3ddb73fad629b25323ee71990be7efc12f1779920dacfd7a525155f42a11fe | Triage

Sharing

General

Target

3d3ddb73fad629b25323ee71990be7efc12f1779920dacfd7a525155f42a11fe.exe
Size

225KB
Sample

241219-e6pr3azjbn
MD5

110f5ebff5128ccf30719ec6a46dc86d
SHA1

7643eac879522e853ad9fa85eccddd48f9108e02
SHA256

3d3ddb73fad629b25323ee71990be7efc12f1779920dacfd7a525155f42a11fe
SHA512

9bffd56e435893538b50b7c7c12d5a50120268a1a9b369eafdaf64d30a6effd7b5b4bded733661ac35fb297bc8208adf41d97958a50204f88b871d4cd66721a4
SSDEEP

6144:zA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:zATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  3d3ddb73fad629b25323ee71990be7efc12f1779920dacfd7a525155f42a11fe.exe
- Size
  
  225KB
- MD5
  
  110f5ebff5128ccf30719ec6a46dc86d
- SHA1
  
  7643eac879522e853ad9fa85eccddd48f9108e02
- SHA256
  
  3d3ddb73fad629b25323ee71990be7efc12f1779920dacfd7a525155f42a11fe
- SHA512
  
  9bffd56e435893538b50b7c7c12d5a50120268a1a9b369eafdaf64d30a6effd7b5b4bded733661ac35fb297bc8208adf41d97958a50204f88b871d4cd66721a4
- SSDEEP
  
  6144:zA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:zATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2