tinba | 77c8961407965a21d8dc9ee29641b4fc1dfe8e9fd45c708648ca718811f6d1a2 | Triage

Sharing

General

Target

77c8961407965a21d8dc9ee29641b4fc1dfe8e9fd45c708648ca718811f6d1a2
Size

225KB
Sample

241226-3pbe4svnft
MD5

a03caef1fad79ea7da470aea559c111d
SHA1

929ceff0e68c785d00f0984bd477d343d4dd8f9c
SHA256

77c8961407965a21d8dc9ee29641b4fc1dfe8e9fd45c708648ca718811f6d1a2
SHA512

2f45bb818bf9761c164591c52c804f2a7f3ddbbf5f4069cd0b44d2e6c20c9b1a57b6acbd59a67a4fe5e5d6c6bc721f851ffff53bc93696e3b84ccc80b11d0e05
SSDEEP

6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:bATuTAnKGwUAW3ycQqgf

Score

10^/10

tinba banker discovery persistence trojan

Malware Config

Targets

- Target
  
  77c8961407965a21d8dc9ee29641b4fc1dfe8e9fd45c708648ca718811f6d1a2
- Size
  
  225KB
- MD5
  
  a03caef1fad79ea7da470aea559c111d
- SHA1
  
  929ceff0e68c785d00f0984bd477d343d4dd8f9c
- SHA256
  
  77c8961407965a21d8dc9ee29641b4fc1dfe8e9fd45c708648ca718811f6d1a2
- SHA512
  
  2f45bb818bf9761c164591c52c804f2a7f3ddbbf5f4069cd0b44d2e6c20c9b1a57b6acbd59a67a4fe5e5d6c6bc721f851ffff53bc93696e3b84ccc80b11d0e05
- SSDEEP
  
  6144:bA2P27yTAnKGw0hjFhSR/W11yAJ9v0pMtRCpYM:bATuTAnKGwUAW3ycQqgf
Score

10^/10

tinba banker discovery persistence trojan
- Tinba / TinyBanker
  Banking trojan which uses packet sniffing to steal data.
  trojan banker tinba
- Tinba family
  tinba
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

tinbabankerdiscoverypersistencetrojan

behavioral2