tinba | 03759d636ca1c9cbf8be0f0f72136b0489919520e2a1db76ce390be049e1530b | Triage

Sharing

General

Target

03759d636ca1c9cbf8be0f0f72136b0489919520e2a1db76ce390be049e1530b
Size

610KB
Sample

241222-xvpa9swphm
MD5

8a11eadd67a98e89e5c3e999e787dfe2
SHA1

2a13461956a496edf0250a17a68361f21ddde691
SHA256

03759d636ca1c9cbf8be0f0f72136b0489919520e2a1db76ce390be049e1530b
SHA512

0a3cc601cd4352269897b54bab9ee35ecdc7406a8aa49d4e4560b8b159c51e867f629fd2cf0c192d653d5201e0b25c2e28db9f561468244ddc9bcbcd692fd169
SSDEEP

12288:AATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:OT+KjUdQqboyyWoK1NGqzuhb

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  03759d636ca1c9cbf8be0f0f72136b0489919520e2a1db76ce390be049e1530b
- Size
  
  610KB
- MD5
  
  8a11eadd67a98e89e5c3e999e787dfe2
- SHA1
  
  2a13461956a496edf0250a17a68361f21ddde691
- SHA256
  
  03759d636ca1c9cbf8be0f0f72136b0489919520e2a1db76ce390be049e1530b
- SHA512
  
  0a3cc601cd4352269897b54bab9ee35ecdc7406a8aa49d4e4560b8b159c51e867f629fd2cf0c192d653d5201e0b25c2e28db9f561468244ddc9bcbcd692fd169
- SSDEEP
  
  12288:AATuTAnKGwUAW3ycQqgYo3CyWoKEY3ZQi7gfqOuuh+c:OT+KjUdQqboyyWoK1NGqzuhb
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2